General
- Target 2026-08-19_473b17cb4992ef045fe64b5bea0d5cbc_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- Sample260819-s2barsdm3s
- SHA256 6420a23d23b38962e2894de90758c98d4e88a35a8df579f2705bceaef3e6fe8e
- MD5 473b17cb4992ef045fe64b5bea0d5cbc
- SHA1 3cb53eb5a0e9f0a446e4853864f9c62d8fa41113
- SHA512 ce1f2b3d75835c45919597578e6092b6d3b35e2b6b8b65bd35b78af876bac807c6f259be7d5e2c12788cd3db1d4f80c592c271c7bb528bc78a471a8e2ecabcb9
- SSDEEP 3072:0FLICbv4aaM/4y4tKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx2:0FL1JeIJjiJcbI03GBc3ucY5DCSjX
- TLSH T1DD847C00BA94F0F6D995043800EBAF36967EB4281726CBC7F354CE5DAA513C3A93569F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-19_473b17cb4992ef045fe64b5bea0d5cbc_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-08-19_473b17cb4992ef045fe64b5bea0d5cbc_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- SHA256 6420a23d23b38962e2894de90758c98d4e88a35a8df579f2705bceaef3e6fe8e
- MD5 473b17cb4992ef045fe64b5bea0d5cbc
- SHA1 3cb53eb5a0e9f0a446e4853864f9c62d8fa41113
- SHA512 ce1f2b3d75835c45919597578e6092b6d3b35e2b6b8b65bd35b78af876bac807c6f259be7d5e2c12788cd3db1d4f80c592c271c7bb528bc78a471a8e2ecabcb9
- SSDEEP 3072:0FLICbv4aaM/4y4tKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx2:0FL1JeIJjiJcbI03GBc3ucY5DCSjX
- TLSH T1DD847C00BA94F0F6D995043800EBAF36967EB4281726CBC7F354CE5DAA513C3A93569F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE