General
- Target 2026-08-03_2f2dea750119f4d5ae91d0ac6ba60688_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- Sample260803-w73trahp2v
- SHA256 3becb2ea063499fd2dd8ad3abc0c931e5819bb4474ea1441d857a91193b841fe
- MD5 2f2dea750119f4d5ae91d0ac6ba60688
- SHA1 4d3ee2aacd777f4884c868e57f113d6ecc02b4c1
- SHA512 8b52f16b32fefe206328e229ee09460951ba9b9dc12bbea7282fd4ada35926c69b312ac0b01ab18ae172865c5231e04324fb86ba363bcf0192b75f72824d4ce4
- SSDEEP 6144:RvzsVKLY+oIJjiJcbI03GBc3ucY5DCSjX:RvzsVKZzGjSGecvX
- TLSH T18E847C04BAA4F0B6D995043800DBAF36A67EB4281726CBC7F354CE5D9A113C3A93579F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-03_2f2dea750119f4d5ae91d0ac6ba60688_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-08-03_2f2dea750119f4d5ae91d0ac6ba60688_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- SHA256 3becb2ea063499fd2dd8ad3abc0c931e5819bb4474ea1441d857a91193b841fe
- MD5 2f2dea750119f4d5ae91d0ac6ba60688
- SHA1 4d3ee2aacd777f4884c868e57f113d6ecc02b4c1
- SHA512 8b52f16b32fefe206328e229ee09460951ba9b9dc12bbea7282fd4ada35926c69b312ac0b01ab18ae172865c5231e04324fb86ba363bcf0192b75f72824d4ce4
- SSDEEP 6144:RvzsVKLY+oIJjiJcbI03GBc3ucY5DCSjX:RvzsVKZzGjSGecvX
- TLSH T18E847C04BAA4F0B6D995043800DBAF36A67EB4281726CBC7F354CE5D9A113C3A93579F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE