General
- Target 2026-10-17_1657f61b7429977d8ea8f358e0ebae06_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- Sample261019-m5qa7sfc85
- SHA256 c54a3220ec9cc3dca836cc5e2da90d263fa8a7ea0a365d5310914999c1c54d58
- MD5 1657f61b7429977d8ea8f358e0ebae06
- SHA1 4600ebe2b49b6ce2c46ae47ce6936fe45a24f4ae
- SHA512 002a7a57cd0ec3b0a509add89f87a1502ad9c114c7d5c41727e4b687ca14b15ea856889cd1c0f842488a85e32a409b023d46122726ca4e0959bbe62b5bf6edb7
- SSDEEP 3072:JFLICbv4aaM/4y4tKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx2:JFL1JeIJjiJcbI03GBc3ucY5DCSjX
- TLSH T108847C00BA94F0F6D995043800EBAF36967EB4281726CBC7F354CE5DAA513C3A93569F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-17_1657f61b7429977d8ea8f358e0ebae06_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-10-17_1657f61b7429977d8ea8f358e0ebae06_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- SHA256 c54a3220ec9cc3dca836cc5e2da90d263fa8a7ea0a365d5310914999c1c54d58
- MD5 1657f61b7429977d8ea8f358e0ebae06
- SHA1 4600ebe2b49b6ce2c46ae47ce6936fe45a24f4ae
- SHA512 002a7a57cd0ec3b0a509add89f87a1502ad9c114c7d5c41727e4b687ca14b15ea856889cd1c0f842488a85e32a409b023d46122726ca4e0959bbe62b5bf6edb7
- SSDEEP 3072:JFLICbv4aaM/4y4tKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx2:JFL1JeIJjiJcbI03GBc3ucY5DCSjX
- TLSH T108847C00BA94F0F6D995043800EBAF36967EB4281726CBC7F354CE5DAA513C3A93569F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE