General
- Target 2026-07-30_e78819fa02c5c389bd1e28d8f2376726_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- Sample260730-c8w8tabp31
- SHA256 08c07bcb28d941bd5af02bd0cd0d0bc2438fdc7138b44d4662d53de21b8fdb94
- MD5 e78819fa02c5c389bd1e28d8f2376726
- SHA1 0566856df7e13d60db4993ae735665573cc31745
- SHA512 f1d8b60721c1a054c8081a6480119cc602d0803be203213c9567a710902408b60e154df446a17294f45b7e1766c900986c154dbf50e127a5144a075478335149
- SSDEEP 3072:zFLICbv4aaM/4y4tKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx2:zFL1JeIJjiJcbI03GBc3ucY5DCSjX
- TLSH T151847C00BA94F0F6D995043800EBAF36967EB4281726CBC7F354CE5DAA513C3A93569F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-30_e78819fa02c5c389bd1e28d8f2376726_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-07-30_e78819fa02c5c389bd1e28d8f2376726_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- SHA256 08c07bcb28d941bd5af02bd0cd0d0bc2438fdc7138b44d4662d53de21b8fdb94
- MD5 e78819fa02c5c389bd1e28d8f2376726
- SHA1 0566856df7e13d60db4993ae735665573cc31745
- SHA512 f1d8b60721c1a054c8081a6480119cc602d0803be203213c9567a710902408b60e154df446a17294f45b7e1766c900986c154dbf50e127a5144a075478335149
- SSDEEP 3072:zFLICbv4aaM/4y4tKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx2:zFL1JeIJjiJcbI03GBc3ucY5DCSjX
- TLSH T151847C00BA94F0F6D995043800EBAF36967EB4281726CBC7F354CE5DAA513C3A93569F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE