General
- Target 2026-09-03_ef9659fa1648bd0085803659ef8cbc7d_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- Sample260903-xvdvjazzhs
- SHA256 7e933f5362cd0dd9f7fdba4327198e74f3d2ab1c845bbfce295fd90f3b908930
- MD5 ef9659fa1648bd0085803659ef8cbc7d
- SHA1 53080a8a8c8835808b73b547cf5fecaf953831fe
- SHA512 b5eca6a960513f9e906170b996531d90381a98888eee43f67cac5f17af011f5f64c055650d887fddafc413f3c4978e40a9f17ddc8e1177448084859c5080484f
- SSDEEP 3072:joCL/8aML4yLtKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx9pyj:joCLoVIJjiJcbI03GBc3ucY5DCSjX
- TLSH T1EA847C04BAA4F0F6D995043800DBAF36967EB4281726CBC7E394CE5D9E113C3A93569F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-03_ef9659fa1648bd0085803659ef8cbc7d_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-09-03_ef9659fa1648bd0085803659ef8cbc7d_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- SHA256 7e933f5362cd0dd9f7fdba4327198e74f3d2ab1c845bbfce295fd90f3b908930
- MD5 ef9659fa1648bd0085803659ef8cbc7d
- SHA1 53080a8a8c8835808b73b547cf5fecaf953831fe
- SHA512 b5eca6a960513f9e906170b996531d90381a98888eee43f67cac5f17af011f5f64c055650d887fddafc413f3c4978e40a9f17ddc8e1177448084859c5080484f
- SSDEEP 3072:joCL/8aML4yLtKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx9pyj:joCLoVIJjiJcbI03GBc3ucY5DCSjX
- TLSH T1EA847C04BAA4F0F6D995043800DBAF36967EB4281726CBC7E394CE5D9E113C3A93569F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE