General
- Target 2026-08-03_57069735a1b1fa919579a301e9b033c5_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- Sample260803-k8hdnafm31
- SHA256 31a8711641c5b99e5e432d2e7e0697545cbc06b6516c87e91ffa01a7821de95c
- MD5 57069735a1b1fa919579a301e9b033c5
- SHA1 45297945ce189506c04857f5dda5f65f8f533d65
- SHA512 79ab970f8e3d8b71451060f61225e9f6d077f7dfb90033e419bd0244f5fba6f1a25d9e13e89fc11b7844519fb3589754b7d15cbd8839c4112563f32363193abc
- SSDEEP 3072:RjyLJAZaMr4yhtKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx9pq:xyLJq/IJjiJcbI03GBc3ucY5DCSjX
- TLSH T13D847C04BAA4F0B6D995043800EF9F3A967E74281726CBC7E754CE5D9A113C3AA3479F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-03_57069735a1b1fa919579a301e9b033c5_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-08-03_57069735a1b1fa919579a301e9b033c5_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- SHA256 31a8711641c5b99e5e432d2e7e0697545cbc06b6516c87e91ffa01a7821de95c
- MD5 57069735a1b1fa919579a301e9b033c5
- SHA1 45297945ce189506c04857f5dda5f65f8f533d65
- SHA512 79ab970f8e3d8b71451060f61225e9f6d077f7dfb90033e419bd0244f5fba6f1a25d9e13e89fc11b7844519fb3589754b7d15cbd8839c4112563f32363193abc
- SSDEEP 3072:RjyLJAZaMr4yhtKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx9pq:xyLJq/IJjiJcbI03GBc3ucY5DCSjX
- TLSH T13D847C04BAA4F0B6D995043800EF9F3A967E74281726CBC7E754CE5D9A113C3AA3479F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE