General
- Target 2026-08-04_fb6baaf19ff735b2f54f8050a8605412_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- Sample260804-vy84qswcmc
- SHA256 aed60324b8e5365a6546ee3f3ac8994162ef70135de6227d70f5612765a6324a
- MD5 fb6baaf19ff735b2f54f8050a8605412
- SHA1 a768a34cd0368d8bb5a1b7423e73833943e7e6e3
- SHA512 c9974c4c07bc4faa9a87022f076a7f4c42a00793203639977b7ad3b4004835fd4f9e8cd9b1180b9672e605cd4200895bdc5c4ebd5b0325fa2c45475d73606ab6
- SSDEEP 3072:HFLICbv4aaM/4y4tKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx2:HFL1JeIJjiJcbI03GBc3ucY5DCSjX
- TLSH T17D847C00BA94F0F6D995043800EBAF36967EB4281726CBC7F354CE5DAA513C3A93569F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-04_fb6baaf19ff735b2f54f8050a8605412_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-08-04_fb6baaf19ff735b2f54f8050a8605412_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- SHA256 aed60324b8e5365a6546ee3f3ac8994162ef70135de6227d70f5612765a6324a
- MD5 fb6baaf19ff735b2f54f8050a8605412
- SHA1 a768a34cd0368d8bb5a1b7423e73833943e7e6e3
- SHA512 c9974c4c07bc4faa9a87022f076a7f4c42a00793203639977b7ad3b4004835fd4f9e8cd9b1180b9672e605cd4200895bdc5c4ebd5b0325fa2c45475d73606ab6
- SSDEEP 3072:HFLICbv4aaM/4y4tKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx2:HFL1JeIJjiJcbI03GBc3ucY5DCSjX
- TLSH T17D847C00BA94F0F6D995043800EBAF36967EB4281726CBC7F354CE5DAA513C3A93569F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE