General
- Target 2026-08-15_79668d003c1e187a703b9711db7edbf2_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- Sample260815-wmgqsaha74
- SHA256 062ecfdc44d119d72c91f5fc2651ba9a9ce05e2438e86b879681f43aac2e8178
- MD5 79668d003c1e187a703b9711db7edbf2
- SHA1 29cd954903c529f58f8c6017626708de16818a90
- SHA512 70c37e548f115fbaa8e4a56f4958c769b4f025c078bbde9cb0107b94e307986f329c06df1180f7989fcc185325919a2da32f00ac3bca7fd368575c6074da664a
- SSDEEP 3072:sT6L7HYaMj4yjtKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx9pq:q6LI9IJjiJcbI03GBc3ucY5DCSjX
- TLSH T1F5847B04BAA4F0F6D995043800EBAF36967EB4242726CBC7E354CE5D9A113C3A93579F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-15_79668d003c1e187a703b9711db7edbf2_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-08-15_79668d003c1e187a703b9711db7edbf2_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- SHA256 062ecfdc44d119d72c91f5fc2651ba9a9ce05e2438e86b879681f43aac2e8178
- MD5 79668d003c1e187a703b9711db7edbf2
- SHA1 29cd954903c529f58f8c6017626708de16818a90
- SHA512 70c37e548f115fbaa8e4a56f4958c769b4f025c078bbde9cb0107b94e307986f329c06df1180f7989fcc185325919a2da32f00ac3bca7fd368575c6074da664a
- SSDEEP 3072:sT6L7HYaMj4yjtKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx9pq:q6LI9IJjiJcbI03GBc3ucY5DCSjX
- TLSH T1F5847B04BAA4F0F6D995043800EBAF36967EB4242726CBC7E354CE5D9A113C3A93579F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE