General
- Target 2026-08-09_c5c5a6fda30fb632f6c1b816e228078e_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- Sample260809-c7grqsgm6y
- SHA256 06f7bba1c490b9068166653674a93fe7f4e8954e2f2e00a4da813101ab9a6452
- MD5 c5c5a6fda30fb632f6c1b816e228078e
- SHA1 0744f3393aee5de4d628ad73ce67c58371049ce2
- SHA512 04996ce0b9fd008fc63952a38c3ddf556e702f8b15fdb95939bf744617ef4f3ad19a0cd75c4ba1c99ed960267bc96feb99aed27401eefc179def25f13aede17a
- SSDEEP 3072:gViLcu7gaMr4ymKtKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx2:gViLcYcVIJjiJcbI03GBc3ucY5DCSjX
- TLSH T158847B04BAA4F0B6D995047800EBAF36967EB4281726CBC7F354CE5D9A113C3A93479F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-09_c5c5a6fda30fb632f6c1b816e228078e_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-08-09_c5c5a6fda30fb632f6c1b816e228078e_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- SHA256 06f7bba1c490b9068166653674a93fe7f4e8954e2f2e00a4da813101ab9a6452
- MD5 c5c5a6fda30fb632f6c1b816e228078e
- SHA1 0744f3393aee5de4d628ad73ce67c58371049ce2
- SHA512 04996ce0b9fd008fc63952a38c3ddf556e702f8b15fdb95939bf744617ef4f3ad19a0cd75c4ba1c99ed960267bc96feb99aed27401eefc179def25f13aede17a
- SSDEEP 3072:gViLcu7gaMr4ymKtKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx2:gViLcYcVIJjiJcbI03GBc3ucY5DCSjX
- TLSH T158847B04BAA4F0B6D995047800EBAF36967EB4281726CBC7F354CE5D9A113C3A93479F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE