General
- Target 2026-08-07_3cdadd7adce585db8a3369aef1a2d869_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- Sample260807-mble6asfqd
- SHA256 05b57dd2945d732bc890730ccac7a3f4827b8a72160a24181850ff7c78cb92e3
- MD5 3cdadd7adce585db8a3369aef1a2d869
- SHA1 0552b2bb60ff721ba7e9054f8bffeddcfd92c401
- SHA512 6d7f0fe58aa2e96b57679f067b50666d5e54b5bb94d974134d4303667cf461e77eee780489e7e43767c7681cc6b490bfe3abc4745873406a1d8a83fead757ac2
- SSDEEP 3072:FViLcu7gaMr4ymKtKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx2:FViLcYcVIJjiJcbI03GBc3ucY5DCSjX
- TLSH T101847B04BAA4F0B6D995047800EBAF36967EB4281726CBC7F354CE5D9A113C3A93479F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-07_3cdadd7adce585db8a3369aef1a2d869_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-08-07_3cdadd7adce585db8a3369aef1a2d869_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- SHA256 05b57dd2945d732bc890730ccac7a3f4827b8a72160a24181850ff7c78cb92e3
- MD5 3cdadd7adce585db8a3369aef1a2d869
- SHA1 0552b2bb60ff721ba7e9054f8bffeddcfd92c401
- SHA512 6d7f0fe58aa2e96b57679f067b50666d5e54b5bb94d974134d4303667cf461e77eee780489e7e43767c7681cc6b490bfe3abc4745873406a1d8a83fead757ac2
- SSDEEP 3072:FViLcu7gaMr4ymKtKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx2:FViLcYcVIJjiJcbI03GBc3ucY5DCSjX
- TLSH T101847B04BAA4F0B6D995047800EBAF36967EB4281726CBC7F354CE5D9A113C3A93479F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE