General
- Target 2026-08-19_4514d55a8947133af55b58d1220b8063_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- Sample260819-qxbdvsbr2x
- SHA256 79e3d9237055228e672eb7435b20eb369d3181b4df0593fd10c1a17d39def0ba
- MD5 4514d55a8947133af55b58d1220b8063
- SHA1 0b6cc6a18644a0ce549f3408e597b24e2126ef12
- SHA512 61bcddfcff783c4fc9a8fa13a946f5dee20ed46bfbcc1bc4b021fa524f49be6a94ba465e8321ff238be5bb4d6fc88825b4825888277b6654c0331da24bbe563e
- SSDEEP 3072:dFLICbv4aaM/4y4tKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx2:dFL1JeIJjiJcbI03GBc3ucY5DCSjX
- TLSH T1C6847C00BA94F0F6D995043800EBAF36967EB4281726CBC7F354CE5DAA513C3A93569F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-19_4514d55a8947133af55b58d1220b8063_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-08-19_4514d55a8947133af55b58d1220b8063_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- SHA256 79e3d9237055228e672eb7435b20eb369d3181b4df0593fd10c1a17d39def0ba
- MD5 4514d55a8947133af55b58d1220b8063
- SHA1 0b6cc6a18644a0ce549f3408e597b24e2126ef12
- SHA512 61bcddfcff783c4fc9a8fa13a946f5dee20ed46bfbcc1bc4b021fa524f49be6a94ba465e8321ff238be5bb4d6fc88825b4825888277b6654c0331da24bbe563e
- SSDEEP 3072:dFLICbv4aaM/4y4tKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx2:dFL1JeIJjiJcbI03GBc3ucY5DCSjX
- TLSH T1C6847C00BA94F0F6D995043800EBAF36967EB4281726CBC7F354CE5DAA513C3A93569F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE