General
- Target 2026-08-03_0c0b7d312e2702e9ffbb43df1b3d0398_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- Sample260803-ljpl4stdmd
- SHA256 10e3ae93d19ea9f2e366d0ab6616afe51c3cdd3e0117526390d2c00a2ea41698
- MD5 0c0b7d312e2702e9ffbb43df1b3d0398
- SHA1 487df936dd2f5396aef59a29175ae9d7244fff5c
- SHA512 44beb7f558795b4777e5edb291e0125347393e0a9e4e5a771c29e6f465ad5b03cb589306071b0fb19fa39dd4380d193d210dbd81f8d70e8de412f9d8845b0f60
- SSDEEP 3072:+FLICbv4aaM/4y4tKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx2:+FL1JeIJjiJcbI03GBc3ucY5DCSjX
- TLSH T1F7847C00BA94F0F6D995043800EBAF36967EB4281726CBC7F354CE5DAA513C3A93569F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-03_0c0b7d312e2702e9ffbb43df1b3d0398_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-08-03_0c0b7d312e2702e9ffbb43df1b3d0398_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- SHA256 10e3ae93d19ea9f2e366d0ab6616afe51c3cdd3e0117526390d2c00a2ea41698
- MD5 0c0b7d312e2702e9ffbb43df1b3d0398
- SHA1 487df936dd2f5396aef59a29175ae9d7244fff5c
- SHA512 44beb7f558795b4777e5edb291e0125347393e0a9e4e5a771c29e6f465ad5b03cb589306071b0fb19fa39dd4380d193d210dbd81f8d70e8de412f9d8845b0f60
- SSDEEP 3072:+FLICbv4aaM/4y4tKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx2:+FL1JeIJjiJcbI03GBc3ucY5DCSjX
- TLSH T1F7847C00BA94F0F6D995043800EBAF36967EB4281726CBC7F354CE5DAA513C3A93569F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE