General
- Target 2026-10-02_1ca7f61dd7c95d93096512cac18cc6b3_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- Sample261003-txh1gssdnd
- SHA256 b0011abb7c63ee7b49185bfdd16cf050b62e78e9d512b018dc8f35f89106bb4e
- MD5 1ca7f61dd7c95d93096512cac18cc6b3
- SHA1 0abff043db1ca335a6a65291d7eb68e7ade523f1
- SHA512 d7076886ce6237fc56bd1a462c281f4d2426959d327c0dcd049961480b672eb154ca3378f67d641b665cb98420cb83dde3573ad81cd1e2a4e7014e8d4a261baf
- SSDEEP 3072:5jyLJAZaMr4yhtKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx9pq:5yLJq/IJjiJcbI03GBc3ucY5DCSjX
- TLSH T13A847C04BAA4F0B6D995043800EF9F3A967E74281726CBC7E754CE5D9A113C3AA3469F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-02_1ca7f61dd7c95d93096512cac18cc6b3_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-10-02_1ca7f61dd7c95d93096512cac18cc6b3_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- SHA256 b0011abb7c63ee7b49185bfdd16cf050b62e78e9d512b018dc8f35f89106bb4e
- MD5 1ca7f61dd7c95d93096512cac18cc6b3
- SHA1 0abff043db1ca335a6a65291d7eb68e7ade523f1
- SHA512 d7076886ce6237fc56bd1a462c281f4d2426959d327c0dcd049961480b672eb154ca3378f67d641b665cb98420cb83dde3573ad81cd1e2a4e7014e8d4a261baf
- SSDEEP 3072:5jyLJAZaMr4yhtKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx9pq:5yLJq/IJjiJcbI03GBc3ucY5DCSjX
- TLSH T13A847C04BAA4F0B6D995043800EF9F3A967E74281726CBC7E754CE5D9A113C3AA3469F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE