General
- Target 2026-08-06_c55b16ba4405cfae0b26f012a13551af_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- Sample260806-p6546abr2v
- SHA256 80256f5343d2ed747dd1c1a8ac7ccccf8cd4e7bb0200408c2ef7e6d93b328c98
- MD5 c55b16ba4405cfae0b26f012a13551af
- SHA1 5d90bf57030f815329e7438a358a9493d2682f95
- SHA512 84f411ba23cf53ab3ba7cefb4ff0808b44d24cb30ec6811e2c28c6f2fecd696c8c75251514b0807687906976fc23c0a2e677a0b183a78bf7e05c9d29c0b2d770
- SSDEEP 3072:1ViLcu7gaMr4ymKtKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx2:1ViLcYcVIJjiJcbI03GBc3ucY5DCSjX
- TLSH T1BB847B04BAA4F0B6D995047800EBAF36967EB4281726CBC7F354CE5D9A113C3A93479F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-06_c55b16ba4405cfae0b26f012a13551af_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-08-06_c55b16ba4405cfae0b26f012a13551af_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- SHA256 80256f5343d2ed747dd1c1a8ac7ccccf8cd4e7bb0200408c2ef7e6d93b328c98
- MD5 c55b16ba4405cfae0b26f012a13551af
- SHA1 5d90bf57030f815329e7438a358a9493d2682f95
- SHA512 84f411ba23cf53ab3ba7cefb4ff0808b44d24cb30ec6811e2c28c6f2fecd696c8c75251514b0807687906976fc23c0a2e677a0b183a78bf7e05c9d29c0b2d770
- SSDEEP 3072:1ViLcu7gaMr4ymKtKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx2:1ViLcYcVIJjiJcbI03GBc3ucY5DCSjX
- TLSH T1BB847B04BAA4F0B6D995047800EBAF36967EB4281726CBC7F354CE5D9A113C3A93479F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE