General
- Target 2026-07-28_c073fad6c542d27505db86f8ef1ac7a3_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- Sample260728-13tshaxcqf
- SHA256 90aad574971461b9c59c50aa13dd7a86c0118b90fcaa61d3a63ac454722865a6
- MD5 c073fad6c542d27505db86f8ef1ac7a3
- SHA1 083e917f15faa34b2682f8ec228ded01bea5d185
- SHA512 4f34323970b3eb9b10091a50a84c6bc05e8dede1ace2afd7dd404ba5e200f8078a5cf7e06ce8f511ebb387e7ff13e452a3292ffe3661b0cbee8ae0a6b364d3b5
- SSDEEP 3072:MFLICbv4aaM/4y4tKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx2:MFL1JeIJjiJcbI03GBc3ucY5DCSjX
- TLSH T116847C00BA94F0F6D995043800EBAF36967EB4281726CBC7F354CE5DAA513C3A93569F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-28_c073fad6c542d27505db86f8ef1ac7a3_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-07-28_c073fad6c542d27505db86f8ef1ac7a3_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- SHA256 90aad574971461b9c59c50aa13dd7a86c0118b90fcaa61d3a63ac454722865a6
- MD5 c073fad6c542d27505db86f8ef1ac7a3
- SHA1 083e917f15faa34b2682f8ec228ded01bea5d185
- SHA512 4f34323970b3eb9b10091a50a84c6bc05e8dede1ace2afd7dd404ba5e200f8078a5cf7e06ce8f511ebb387e7ff13e452a3292ffe3661b0cbee8ae0a6b364d3b5
- SSDEEP 3072:MFLICbv4aaM/4y4tKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx2:MFL1JeIJjiJcbI03GBc3ucY5DCSjX
- TLSH T116847C00BA94F0F6D995043800EBAF36967EB4281726CBC7F354CE5DAA513C3A93569F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE