General
- Target 2026-08-02_0f3e15dacec3e59c6e611a863d3832e3_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- Sample260802-yckqss1apb
- SHA256 6fb397097ee7d1a0f807622ced6bb4701bad0cdadd24283bb19499431ce1b18a
- MD5 0f3e15dacec3e59c6e611a863d3832e3
- SHA1 a506b91c09efa00009c14d4862e9b8e9e3e5eb9f
- SHA512 de8b993ff52bfffdd646acbdcf4bc52d21d9b2e6bfc81f311d3fc8d651ca19f69cc2aaa9cc78e296cdea69ccbdea874deeb6b71140ecf6e2c447975058cd4ef9
- SSDEEP 3072:mViLcu7gaMr4ymKtKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx2:mViLcYcVIJjiJcbI03GBc3ucY5DCSjX
- TLSH T1FD847B00BAA4F0B6D995047804EBAF36967EB4281726CBC7F354CE5D9A113C3A93479F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-02_0f3e15dacec3e59c6e611a863d3832e3_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-08-02_0f3e15dacec3e59c6e611a863d3832e3_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- SHA256 6fb397097ee7d1a0f807622ced6bb4701bad0cdadd24283bb19499431ce1b18a
- MD5 0f3e15dacec3e59c6e611a863d3832e3
- SHA1 a506b91c09efa00009c14d4862e9b8e9e3e5eb9f
- SHA512 de8b993ff52bfffdd646acbdcf4bc52d21d9b2e6bfc81f311d3fc8d651ca19f69cc2aaa9cc78e296cdea69ccbdea874deeb6b71140ecf6e2c447975058cd4ef9
- SSDEEP 3072:mViLcu7gaMr4ymKtKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx2:mViLcYcVIJjiJcbI03GBc3ucY5DCSjX
- TLSH T1FD847B00BAA4F0B6D995047804EBAF36967EB4281726CBC7F354CE5D9A113C3A93479F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE