General
- Target 2026-08-20_499d10c7d37a92369512a4551c2577ee_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- Sample260820-s2mc2azfpf
- SHA256 64d4f433e7574c53dd2000ea78810f0ec50916306f08c5d265f44a30aa3ace76
- MD5 499d10c7d37a92369512a4551c2577ee
- SHA1 ab3185cbd94c4f985f296582ecb8c0ac7fb41f2b
- SHA512 a1f5afd3bb7abbab5beb79d5f1b912576e3e9b2094323a662c69367e17222ec731a5e452d9c750305c15ae82c5225a1d80d07937704b049660f2086f6556524a
- SSDEEP 3072:FFLICbv4aaM/4y4tKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx2:FFL1JeIJjiJcbI03GBc3ucY5DCSjX
- TLSH T100847C00BA94F0F6D995043800EBAF36967EB4281726CBC7F354CE5DAA513C3A93569F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-20_499d10c7d37a92369512a4551c2577ee_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-08-20_499d10c7d37a92369512a4551c2577ee_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- SHA256 64d4f433e7574c53dd2000ea78810f0ec50916306f08c5d265f44a30aa3ace76
- MD5 499d10c7d37a92369512a4551c2577ee
- SHA1 ab3185cbd94c4f985f296582ecb8c0ac7fb41f2b
- SHA512 a1f5afd3bb7abbab5beb79d5f1b912576e3e9b2094323a662c69367e17222ec731a5e452d9c750305c15ae82c5225a1d80d07937704b049660f2086f6556524a
- SSDEEP 3072:FFLICbv4aaM/4y4tKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx2:FFL1JeIJjiJcbI03GBc3ucY5DCSjX
- TLSH T100847C00BA94F0F6D995043800EBAF36967EB4281726CBC7F354CE5DAA513C3A93569F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE