General
- Target 2026-08-19_e54a679a84470d7e1d67aa6a2ebba1a0_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- Sample260819-jmlnhsfp4t
- SHA256 bb123cf42e822a541ee11c1231c8df24ce0eef7faca7f9bd216bd7adf2039b92
- MD5 e54a679a84470d7e1d67aa6a2ebba1a0
- SHA1 531c83d52598dd2479640e96d8b5bc2eadda9130
- SHA512 669d4ece1eab1675868f8d197fecb9fc2650c1a37f35e170392fe6a1c434d29bdaef54735c4717e73dc6d45929de50720f454b8b410bbc27b6a675b0a97bc49e
- SSDEEP 3072:PjyLJAZaMr4yhtKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx9pq:LyLJq/IJjiJcbI03GBc3ucY5DCSjX
- TLSH T104847C04BAA4F0F6D995043800EF9F3A967E74281726CBC7E754CE5D9A113C3AA3469F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-19_e54a679a84470d7e1d67aa6a2ebba1a0_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-08-19_e54a679a84470d7e1d67aa6a2ebba1a0_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- SHA256 bb123cf42e822a541ee11c1231c8df24ce0eef7faca7f9bd216bd7adf2039b92
- MD5 e54a679a84470d7e1d67aa6a2ebba1a0
- SHA1 531c83d52598dd2479640e96d8b5bc2eadda9130
- SHA512 669d4ece1eab1675868f8d197fecb9fc2650c1a37f35e170392fe6a1c434d29bdaef54735c4717e73dc6d45929de50720f454b8b410bbc27b6a675b0a97bc49e
- SSDEEP 3072:PjyLJAZaMr4yhtKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx9pq:LyLJq/IJjiJcbI03GBc3ucY5DCSjX
- TLSH T104847C04BAA4F0F6D995043800EF9F3A967E74281726CBC7E754CE5D9A113C3AA3469F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE