General
- Target 2026-08-02_523bc2673fff1f2be8784b98cf862efb_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- Sample260802-w9gpasel9z
- SHA256 3ca5d868e317f774354c7fee9427f36fad5240a1d8932342c2fc55c3a4b5768b
- MD5 523bc2673fff1f2be8784b98cf862efb
- SHA1 39c2f69ca26f656d7bed8c4f65eb5501ce23f8a3
- SHA512 5de2b5a5cdcaa417341160f1676286293b704621a900304e166543ac1dfdc732d0bda420d8a9a03af576094c81afb315f5666eb74028bcf4eb12d28067314849
- SSDEEP 3072:QjyLJAZaMr4yhtKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx9pq:+yLJq/IJjiJcbI03GBc3ucY5DCSjX
- TLSH T11A847C04BAA4F0B6D995043800EF9F3A967E74281726CBC7E754CE5D9A113C3AA3479F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-02_523bc2673fff1f2be8784b98cf862efb_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-08-02_523bc2673fff1f2be8784b98cf862efb_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- SHA256 3ca5d868e317f774354c7fee9427f36fad5240a1d8932342c2fc55c3a4b5768b
- MD5 523bc2673fff1f2be8784b98cf862efb
- SHA1 39c2f69ca26f656d7bed8c4f65eb5501ce23f8a3
- SHA512 5de2b5a5cdcaa417341160f1676286293b704621a900304e166543ac1dfdc732d0bda420d8a9a03af576094c81afb315f5666eb74028bcf4eb12d28067314849
- SSDEEP 3072:QjyLJAZaMr4yhtKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx9pq:+yLJq/IJjiJcbI03GBc3ucY5DCSjX
- TLSH T11A847C04BAA4F0B6D995043800EF9F3A967E74281726CBC7E754CE5D9A113C3AA3479F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE