General
- Target 2026-08-03_86b9e4bb52e033d3018ca709a001714d_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- Sample260803-v6w45sda59
- SHA256 1d6eee9e0155a66d51dbc2d6bb5f3fa0e9ce9c50804776882552367dfe91b772
- MD5 86b9e4bb52e033d3018ca709a001714d
- SHA1 ef7a983db90001e0e880d3d473e1213cb9078748
- SHA512 1bbebaa927844e2a8e1a0e0ce1b28e15228c624b3bf6a56a349322af93163981e501fc0526725294d537a0eb1b0c734b4fecf1fa4bd8faeb7bcb035dde85d61d
- SSDEEP 6144:HvzsVKLY+oIJjiJcbI03GBc3ucY5DCSjX:HvzsVKZzGjSGecvX
- TLSH T1DD847C04BAA4F0B6D995043800DBAF36A67EB4241726CBC7F354CE5D9A113C3A93579F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-03_86b9e4bb52e033d3018ca709a001714d_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-08-03_86b9e4bb52e033d3018ca709a001714d_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- SHA256 1d6eee9e0155a66d51dbc2d6bb5f3fa0e9ce9c50804776882552367dfe91b772
- MD5 86b9e4bb52e033d3018ca709a001714d
- SHA1 ef7a983db90001e0e880d3d473e1213cb9078748
- SHA512 1bbebaa927844e2a8e1a0e0ce1b28e15228c624b3bf6a56a349322af93163981e501fc0526725294d537a0eb1b0c734b4fecf1fa4bd8faeb7bcb035dde85d61d
- SSDEEP 6144:HvzsVKLY+oIJjiJcbI03GBc3ucY5DCSjX:HvzsVKZzGjSGecvX
- TLSH T1DD847C04BAA4F0B6D995043800DBAF36A67EB4241726CBC7F354CE5D9A113C3A93579F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE