General
- Target 2026-08-04_da4d260d5df2f68e4c519e18ffaf7636_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- Sample260804-whk8eawfpf
- SHA256 86b130a7cdba7eb8b8147588bbd016a2cc44e400f7461c91a3de9dd1a4d5807b
- MD5 da4d260d5df2f68e4c519e18ffaf7636
- SHA1 4db6c32db1a03aa4a8b952f52db70d88cbe347b1
- SHA512 3f6c45c0326a6e8e5dca614ea32e8d6e86ea051666b833a826981c46a8a08fe04d485b0f220c1559d71c9c948da0262f48f050bc0ab09d59725432798da7d918
- SSDEEP 3072:hFLICbv4aaM/4y4tKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx2:hFL1JeIJjiJcbI03GBc3ucY5DCSjX
- TLSH T1C2847C00BA94F0F6D995043800EBAF36967EB4281726CBC7F354CE5DAA513C3A93569F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-04_da4d260d5df2f68e4c519e18ffaf7636_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-08-04_da4d260d5df2f68e4c519e18ffaf7636_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- SHA256 86b130a7cdba7eb8b8147588bbd016a2cc44e400f7461c91a3de9dd1a4d5807b
- MD5 da4d260d5df2f68e4c519e18ffaf7636
- SHA1 4db6c32db1a03aa4a8b952f52db70d88cbe347b1
- SHA512 3f6c45c0326a6e8e5dca614ea32e8d6e86ea051666b833a826981c46a8a08fe04d485b0f220c1559d71c9c948da0262f48f050bc0ab09d59725432798da7d918
- SSDEEP 3072:hFLICbv4aaM/4y4tKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx2:hFL1JeIJjiJcbI03GBc3ucY5DCSjX
- TLSH T1C2847C00BA94F0F6D995043800EBAF36967EB4281726CBC7F354CE5DAA513C3A93569F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE