General
- Target 2026-08-23_67c2c0f2fceb2ce72e2be3001169f3ea_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- Sample260824-lxna7seq2s
- SHA256 031e5e2507b4414544c0d29be7fefe0fdce4c9e18ab4257f6197bfd6d8e64eed
- MD5 67c2c0f2fceb2ce72e2be3001169f3ea
- SHA1 73c2ffbd3bb367bebb660cc6254e09bebf8121fd
- SHA512 f80fb0b66ae49f2b4a8bc1960ac0dd0e2a5c333ca65728f5f48f9bd84585ef1d9e1a7b3f19414f44b02942cd60be6b7414d6e2cba670b0bb20ae1664db6eb6b9
- SSDEEP 3072:GFLICbv4aaM/4y4tKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx2:GFL1JeIJjiJcbI03GBc3ucY5DCSjX
- TLSH T130847C00BA94F0F6D995043800EBAF36967EB4281726CBC7F354CE5DAA513C3A93569F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-23_67c2c0f2fceb2ce72e2be3001169f3ea_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-08-23_67c2c0f2fceb2ce72e2be3001169f3ea_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- SHA256 031e5e2507b4414544c0d29be7fefe0fdce4c9e18ab4257f6197bfd6d8e64eed
- MD5 67c2c0f2fceb2ce72e2be3001169f3ea
- SHA1 73c2ffbd3bb367bebb660cc6254e09bebf8121fd
- SHA512 f80fb0b66ae49f2b4a8bc1960ac0dd0e2a5c333ca65728f5f48f9bd84585ef1d9e1a7b3f19414f44b02942cd60be6b7414d6e2cba670b0bb20ae1664db6eb6b9
- SSDEEP 3072:GFLICbv4aaM/4y4tKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx2:GFL1JeIJjiJcbI03GBc3ucY5DCSjX
- TLSH T130847C00BA94F0F6D995043800EBAF36967EB4281726CBC7F354CE5DAA513C3A93569F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE