General

  • Target
    2026-08-27_ed030c9f4cd782ebe8c1d5a46e7e9328_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop
  • Size 389KB
  • Sample260828-c79shsbf55
  • SHA256 22211b06858325f93afa92fcdc71dfbefe7f703e2cd7bb72018ec8784ad1cf59
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-08-27_ed030c9f4cd782ebe8c1d5a46e7e9328_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop
    • Size 389KB
    • SHA256 22211b06858325f93afa92fcdc71dfbefe7f703e2cd7bb72018ec8784ad1cf59
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: Systex

      Systex is a trojan loader written in C++.

    • Detects executables containing bas64 encoded gzip files

    • Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks