General
- Target 2026-10-01_7c39e44fd735b140b44dc93a8d2e1c7e_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- Sample261002-mx7waagg74
- SHA256 06b7d402b99ff084f1d80cfa48f091a4a25f8d60ed4829b4521a61cb8af1b2d1
- MD5 7c39e44fd735b140b44dc93a8d2e1c7e
- SHA1 b471baf5e0c1b9bc9a2ab7d4b7f2811a526fe7a7
- SHA512 64e57aebf28f85fb54781547ac8f02da79df30ea7346419397bf63995bb848bfa5bc68618854b5a43fb7dd1f9f14129eacd0c5c5774d1e2dfbc050146e7a1b09
- SSDEEP 3072:5jyLJAZaMr4yhtKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx9pq:5yLJq/IJjiJcbI03GBc3ucY5DCSjX
- TLSH T17A847C04BAA4F0F6D995043800EF9F3A967E74281726CBC7E754CE5D9A113C3AA3469F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-01_7c39e44fd735b140b44dc93a8d2e1c7e_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-10-01_7c39e44fd735b140b44dc93a8d2e1c7e_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- SHA256 06b7d402b99ff084f1d80cfa48f091a4a25f8d60ed4829b4521a61cb8af1b2d1
- MD5 7c39e44fd735b140b44dc93a8d2e1c7e
- SHA1 b471baf5e0c1b9bc9a2ab7d4b7f2811a526fe7a7
- SHA512 64e57aebf28f85fb54781547ac8f02da79df30ea7346419397bf63995bb848bfa5bc68618854b5a43fb7dd1f9f14129eacd0c5c5774d1e2dfbc050146e7a1b09
- SSDEEP 3072:5jyLJAZaMr4yhtKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx9pq:5yLJq/IJjiJcbI03GBc3ucY5DCSjX
- TLSH T17A847C04BAA4F0F6D995043800EF9F3A967E74281726CBC7E754CE5D9A113C3AA3469F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE