General
- Target 2026-08-04_9c3cafd0d158d8a7a417a465d4bd27e0_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- Sample260804-2g932asara
- SHA256 aca05cd45c1aeb7b34e2151a4e6f80842f84b96dba14c816cc9d61224c252a70
- MD5 9c3cafd0d158d8a7a417a465d4bd27e0
- SHA1 5f80aca5ac1358f5c4fc523cda44d331e00df157
- SHA512 25bc85764f99e6918e0b6455658f4ae039a37928824d65c179ce9d4c4fc2d8041884e1d3a5202687321757c32e1a43003a90de75ac8a4ae578ac855516abed75
- SSDEEP 3072:4FLICbv4aaM/4y4tKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx2:4FL1JeIJjiJcbI03GBc3ucY5DCSjX
- TLSH T17E847C00BA94F0F6D995043800EBAF36967EB4281726CBC7F354CE5DAA513C3A93569F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-04_9c3cafd0d158d8a7a417a465d4bd27e0_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-08-04_9c3cafd0d158d8a7a417a465d4bd27e0_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- SHA256 aca05cd45c1aeb7b34e2151a4e6f80842f84b96dba14c816cc9d61224c252a70
- MD5 9c3cafd0d158d8a7a417a465d4bd27e0
- SHA1 5f80aca5ac1358f5c4fc523cda44d331e00df157
- SHA512 25bc85764f99e6918e0b6455658f4ae039a37928824d65c179ce9d4c4fc2d8041884e1d3a5202687321757c32e1a43003a90de75ac8a4ae578ac855516abed75
- SSDEEP 3072:4FLICbv4aaM/4y4tKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx2:4FL1JeIJjiJcbI03GBc3ucY5DCSjX
- TLSH T17E847C00BA94F0F6D995043800EBAF36967EB4281726CBC7F354CE5DAA513C3A93569F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE