General
- Target 2026-10-15_e5da2977843f750c1f92d55647af24c9_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- Sample261016-bpph7azt5p
- SHA256 00a5f1e883e711a34b37e00e64d43e537d8a195ffc25b368cbfb5640cc58ddd0
- MD5 e5da2977843f750c1f92d55647af24c9
- SHA1 32a505c0d640873fc0ef807269c8522276bd01b4
- SHA512 526cd64bad3fd613961ec568b027337c2d8e44a6d3f7176237e38046c6c696fbdfec15470f6185ed1c5b39421527cd939c5814f9b88fa78ec0033230aa6d253e
- SSDEEP 3072:lKLoLaMP4ydtKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx9pypR:lKLMLIJjiJcbI03GBc3ucY5DCSjX
- TLSH T1D9847C00BAA4F0F6D995043804EBAF3A967EB4241726CBC7E354CE5D9A113C3A93579F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-15_e5da2977843f750c1f92d55647af24c9_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-10-15_e5da2977843f750c1f92d55647af24c9_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- SHA256 00a5f1e883e711a34b37e00e64d43e537d8a195ffc25b368cbfb5640cc58ddd0
- MD5 e5da2977843f750c1f92d55647af24c9
- SHA1 32a505c0d640873fc0ef807269c8522276bd01b4
- SHA512 526cd64bad3fd613961ec568b027337c2d8e44a6d3f7176237e38046c6c696fbdfec15470f6185ed1c5b39421527cd939c5814f9b88fa78ec0033230aa6d253e
- SSDEEP 3072:lKLoLaMP4ydtKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx9pypR:lKLMLIJjiJcbI03GBc3ucY5DCSjX
- TLSH T1D9847C00BAA4F0F6D995043804EBAF3A967EB4241726CBC7E354CE5D9A113C3A93579F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE