General
- Target 2026-08-04_aee80635cad6007e72c7498b1613eafe_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- Sample260804-xey6jack6w
- SHA256 57d90de0fe65adc4ba841c1e4b6a222f35f32499c18fb2cf976b04d86bad4d2f
- MD5 aee80635cad6007e72c7498b1613eafe
- SHA1 3910d73b502ea078dfd4e935155918a16e5ad7d6
- SHA512 2ab4daf163d4ba3d278451b770501d0d63eef99636e721c2599ee28f25bfc977d11636c6a8d0984e012c73c0b6ee6ba3bf824e02b32503bc482efd84498afdaa
- SSDEEP 3072:dFLICbv4aaM/4y4tKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx2:dFL1JeIJjiJcbI03GBc3ucY5DCSjX
- TLSH T13B847C00BA94F0F6D995043800EBAF36967EB4281726CBC7F354CE5DAA513C3A93569F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-04_aee80635cad6007e72c7498b1613eafe_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-08-04_aee80635cad6007e72c7498b1613eafe_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- SHA256 57d90de0fe65adc4ba841c1e4b6a222f35f32499c18fb2cf976b04d86bad4d2f
- MD5 aee80635cad6007e72c7498b1613eafe
- SHA1 3910d73b502ea078dfd4e935155918a16e5ad7d6
- SHA512 2ab4daf163d4ba3d278451b770501d0d63eef99636e721c2599ee28f25bfc977d11636c6a8d0984e012c73c0b6ee6ba3bf824e02b32503bc482efd84498afdaa
- SSDEEP 3072:dFLICbv4aaM/4y4tKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx2:dFL1JeIJjiJcbI03GBc3ucY5DCSjX
- TLSH T13B847C00BA94F0F6D995043800EBAF36967EB4281726CBC7F354CE5DAA513C3A93569F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE