General
- Target 2026-08-15_a0461e609d723a451aeef6d1a12d101c_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- Sample260815-ty4ctadr6y
- SHA256 3f30e42eaa0e78773e867c4d6985a7bc5b1c46f8cc8ca2d5c6a80aada8b573a5
- MD5 a0461e609d723a451aeef6d1a12d101c
- SHA1 0348be2989f58229a6739b1450e824e36975e4b7
- SHA512 5172e8af348eb48b43bf172e0bfef6fd6b327027de2acf9239de6ab5df21ea97b50d3377f9fbdea0d92f29fca5b3644df5c4ea6ba64ed88a85e1f03a4f73c4e3
- SSDEEP 3072:WT6L7HYaMj4yjtKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx9pq:M6LI9IJjiJcbI03GBc3ucY5DCSjX
- TLSH T1D7847B04BAA4F0F6D995043800EBAF36967EB4242726CBC7E354CE5D9A113C3A93579F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-15_a0461e609d723a451aeef6d1a12d101c_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-08-15_a0461e609d723a451aeef6d1a12d101c_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- SHA256 3f30e42eaa0e78773e867c4d6985a7bc5b1c46f8cc8ca2d5c6a80aada8b573a5
- MD5 a0461e609d723a451aeef6d1a12d101c
- SHA1 0348be2989f58229a6739b1450e824e36975e4b7
- SHA512 5172e8af348eb48b43bf172e0bfef6fd6b327027de2acf9239de6ab5df21ea97b50d3377f9fbdea0d92f29fca5b3644df5c4ea6ba64ed88a85e1f03a4f73c4e3
- SSDEEP 3072:WT6L7HYaMj4yjtKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx9pq:M6LI9IJjiJcbI03GBc3ucY5DCSjX
- TLSH T1D7847B04BAA4F0F6D995043800EBAF36967EB4242726CBC7E354CE5D9A113C3A93579F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE