General
- Target 2026-08-19_c1771f4731f81b732cdb85bfad720c49_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- Sample260819-11va9axtes
- SHA256 33beb0379cefba397c6d34db2a21ffbe3022f24ef63bf85d708b82f8eae37536
- MD5 c1771f4731f81b732cdb85bfad720c49
- SHA1 d790b6e4472fa9f2bd80382fbed9d594fb14c5f2
- SHA512 a71090e00e45f092dae0ff50411e11bca1ec57be7df0518e15e4feb4554d1a54ae37c02059a7b61916194311bab829af2cb591d8de9094f22afc90925145deb7
- SSDEEP 6144:ZvzsVKLY+oIJjiJcbI03GBc3ucY5DCSjX:ZvzsVKZzGjSGecvX
- TLSH T132847C04BAA4F0B6D995043800DBAF36A67EB4281726CBC7F354CE5D9A113C3A93579F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-19_c1771f4731f81b732cdb85bfad720c49_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-08-19_c1771f4731f81b732cdb85bfad720c49_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- SHA256 33beb0379cefba397c6d34db2a21ffbe3022f24ef63bf85d708b82f8eae37536
- MD5 c1771f4731f81b732cdb85bfad720c49
- SHA1 d790b6e4472fa9f2bd80382fbed9d594fb14c5f2
- SHA512 a71090e00e45f092dae0ff50411e11bca1ec57be7df0518e15e4feb4554d1a54ae37c02059a7b61916194311bab829af2cb591d8de9094f22afc90925145deb7
- SSDEEP 6144:ZvzsVKLY+oIJjiJcbI03GBc3ucY5DCSjX:ZvzsVKZzGjSGecvX
- TLSH T132847C04BAA4F0B6D995043800DBAF36A67EB4281726CBC7F354CE5D9A113C3A93579F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE