General
- Target 2026-08-09_5381f6b40091e79dca45c8e421ab6f48_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- Sample260809-vb5sssvwfy
- SHA256 6c5e697d05bd72c9dbd7f6933cfb416c1c83bbc6313bac1f25e8cead3b09c981
- MD5 5381f6b40091e79dca45c8e421ab6f48
- SHA1 a37439a991aaf73aaa9ef67336c3fffb41568c9f
- SHA512 11366ec307380eb6b61b1ce33d06a43446327783341d966d109bb9463e5eb22e75df40568b1c8960505359333937efe2ba1a16fe1b28189c0a3feac125509bff
- SSDEEP 3072:lViLcu7gaMr4ymKtKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx2:lViLcYcVIJjiJcbI03GBc3ucY5DCSjX
- TLSH T170847B04BAA4F0B6D995047800EBAF36967EB4281726CBC7F354CE5D9A113C3A93479F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-09_5381f6b40091e79dca45c8e421ab6f48_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-08-09_5381f6b40091e79dca45c8e421ab6f48_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- SHA256 6c5e697d05bd72c9dbd7f6933cfb416c1c83bbc6313bac1f25e8cead3b09c981
- MD5 5381f6b40091e79dca45c8e421ab6f48
- SHA1 a37439a991aaf73aaa9ef67336c3fffb41568c9f
- SHA512 11366ec307380eb6b61b1ce33d06a43446327783341d966d109bb9463e5eb22e75df40568b1c8960505359333937efe2ba1a16fe1b28189c0a3feac125509bff
- SSDEEP 3072:lViLcu7gaMr4ymKtKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx2:lViLcYcVIJjiJcbI03GBc3ucY5DCSjX
- TLSH T170847B04BAA4F0B6D995047800EBAF36967EB4281726CBC7F354CE5D9A113C3A93479F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE