General
- Target 2026-08-06_03f594b134b15a0314c994f561b6c81c_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- Sample260806-q91jhsxtfx
- SHA256 f408a1e7bbe016b5e1e8253d6b71ca2a8fb4489eb20987833d6978d50927f629
- MD5 03f594b134b15a0314c994f561b6c81c
- SHA1 de9a2a89728c1f9856d2028cee3b2d257dcce2e7
- SHA512 a9eec65e6bb222e0db5d8aa3fadf22da31cf19ea4535a1307adf97bf74acb55d3720bd929cdc63818221efb02468efa2f5a4725cd33772ff181e4f11d53713c7
- SSDEEP 3072:/ViLcu7gaMr4ymKtKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx2:/ViLcYcVIJjiJcbI03GBc3ucY5DCSjX
- TLSH T19E847B04BAA4F0B6D995047800EBAF36967EB4281726CBC7F354CE5D9A113C3A93479F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-06_03f594b134b15a0314c994f561b6c81c_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-08-06_03f594b134b15a0314c994f561b6c81c_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- SHA256 f408a1e7bbe016b5e1e8253d6b71ca2a8fb4489eb20987833d6978d50927f629
- MD5 03f594b134b15a0314c994f561b6c81c
- SHA1 de9a2a89728c1f9856d2028cee3b2d257dcce2e7
- SHA512 a9eec65e6bb222e0db5d8aa3fadf22da31cf19ea4535a1307adf97bf74acb55d3720bd929cdc63818221efb02468efa2f5a4725cd33772ff181e4f11d53713c7
- SSDEEP 3072:/ViLcu7gaMr4ymKtKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx2:/ViLcYcVIJjiJcbI03GBc3ucY5DCSjX
- TLSH T19E847B04BAA4F0B6D995047800EBAF36967EB4281726CBC7F354CE5D9A113C3A93479F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE