General
- Target 2026-10-17_7946088da40e91c9268cc5178f428dd1_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- Sample261019-ch2evads2v
- SHA256 ab5c5169fd60d418686bb8b2992903ea988ccd89ace96507646a83e1598154c9
- MD5 7946088da40e91c9268cc5178f428dd1
- SHA1 df12a9bd5a87c44794038c5a421fc4fea5ed7634
- SHA512 5c2b197dce505a40847235363ef0881cff0977beb24389d9c2c65bad29b2bd0187b8eca718e531cf08335db5ab46f47b6f719530c7639b9c8e17bef846d12434
- SSDEEP 3072:vFLICbv4aaM/4y4tKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx2:vFL1JeIJjiJcbI03GBc3ucY5DCSjX
- TLSH T134847C00BA94F0F6D995043800EBAF36967EB4281726CBC7F354CE5DAA513C3A93569F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-17_7946088da40e91c9268cc5178f428dd1_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-10-17_7946088da40e91c9268cc5178f428dd1_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- SHA256 ab5c5169fd60d418686bb8b2992903ea988ccd89ace96507646a83e1598154c9
- MD5 7946088da40e91c9268cc5178f428dd1
- SHA1 df12a9bd5a87c44794038c5a421fc4fea5ed7634
- SHA512 5c2b197dce505a40847235363ef0881cff0977beb24389d9c2c65bad29b2bd0187b8eca718e531cf08335db5ab46f47b6f719530c7639b9c8e17bef846d12434
- SSDEEP 3072:vFLICbv4aaM/4y4tKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx2:vFL1JeIJjiJcbI03GBc3ucY5DCSjX
- TLSH T134847C00BA94F0F6D995043800EBAF36967EB4281726CBC7F354CE5DAA513C3A93569F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE