General
- Target 2026-08-13_dc01c96bf48815b086a7d7b83c72c2bd_amadey_darkgate_elex_floxif_rhadamanthys_stealc_stop
- Size 1.4MB
- Sample260813-txl25scl5z
- SHA256 9d441a293b7a4c5fdfb4b7948177427c69a3c26f980c337390ce10e7c8b2337f
- MD5 dc01c96bf48815b086a7d7b83c72c2bd
- SHA1 d80ace29ad8615db760d6ea091a22b7d6d90a526
- SHA512 362964422687b1581fda2b99df05d49d113bf9136ebc2b557494d28139c13d162194a10fc52dc163e16e3757bf5181cd81358559f121581dab75b8bb8cd585ca
- SSDEEP 24576:DRwibg4+TtLGLYTjLsytLD/nDtBHD8RFblFNjiH1QBtMvrEH7sk:DRwd4+DLtB8RdlFNjiH1QHMDk
- TLSH T138656CE0A6A0C93BE4B2E6B2393D45395475BE731B7081CF22D07D791A76AC16A34F13
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-13_dc01c96bf48815b086a7d7b83c72c2bd_amadey_darkgate_elex_floxif_rhadamanthys_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_dc01c96bf48815b086a7d7b83c72c2bd_amadey_darkgate_elex_floxif_rhadamanthys_stealc_stop
- Size 1.4MB
- SHA256 9d441a293b7a4c5fdfb4b7948177427c69a3c26f980c337390ce10e7c8b2337f
- MD5 dc01c96bf48815b086a7d7b83c72c2bd
- SHA1 d80ace29ad8615db760d6ea091a22b7d6d90a526
- SHA512 362964422687b1581fda2b99df05d49d113bf9136ebc2b557494d28139c13d162194a10fc52dc163e16e3757bf5181cd81358559f121581dab75b8bb8cd585ca
- SSDEEP 24576:DRwibg4+TtLGLYTjLsytLD/nDtBHD8RFblFNjiH1QBtMvrEH7sk:DRwd4+DLtB8RdlFNjiH1QHMDk
- TLSH T138656CE0A6A0C93BE4B2E6B2393D45395475BE731B7081CF22D07D791A76AC16A34F13
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Floxif payload
-
UPX dump on OEP (original entry point)
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Loads dropped DLL