General
- Target 2026-10-08_6dabb996df7f03db9658d8aff291dfe4_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- Sample261009-ph62jswtbx
- SHA256 71649ea2d3deee5e29a4b5d449fbd22fc936e8b218772b8e546a6dcd86eb359e
- MD5 6dabb996df7f03db9658d8aff291dfe4
- SHA1 9af4d9f2905b7a0e44be021085b94fe1331e9f6f
- SHA512 4499908957ce99f421fa9bee958b363e36d1cb0334e041c1dabefadb4cde26b2a26de349ab05c42d7c4689530aee0c3782e29a0eb55b28ef6d7991eb6e9e6cd4
- SSDEEP 3072:CFLICbv4aaM/4y4tKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx2:CFL1JeIJjiJcbI03GBc3ucY5DCSjX
- TLSH T1CF847C00BA94F0F6D995043800EBAF36967EB4281726CBC7F354CE5DAA513C3A93569F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-08_6dabb996df7f03db9658d8aff291dfe4_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-10-08_6dabb996df7f03db9658d8aff291dfe4_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- SHA256 71649ea2d3deee5e29a4b5d449fbd22fc936e8b218772b8e546a6dcd86eb359e
- MD5 6dabb996df7f03db9658d8aff291dfe4
- SHA1 9af4d9f2905b7a0e44be021085b94fe1331e9f6f
- SHA512 4499908957ce99f421fa9bee958b363e36d1cb0334e041c1dabefadb4cde26b2a26de349ab05c42d7c4689530aee0c3782e29a0eb55b28ef6d7991eb6e9e6cd4
- SSDEEP 3072:CFLICbv4aaM/4y4tKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx2:CFL1JeIJjiJcbI03GBc3ucY5DCSjX
- TLSH T1CF847C00BA94F0F6D995043800EBAF36967EB4281726CBC7F354CE5DAA513C3A93569F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE