General
- Target 2026-10-19_0abc021a5aa3dc8d4c3da2b74bca98ab_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- Sample261021-e1f8qszw8n
- SHA256 4b85ea7bc9668ba49ebdee97b27df8436d150a8b8ffa302d640ecb277b156042
- MD5 0abc021a5aa3dc8d4c3da2b74bca98ab
- SHA1 7666829b005f7ece5b4d734e722df217f5f60e3f
- SHA512 23dde8d64f35d23b4b10e832a22df97b9ad571610c7e85d30ec736afceb94cd749c94cf9be7784ed628b875dbed780a5a8f4ab87838afd2704a8a11edc409256
- SSDEEP 3072:41UeyLCFVaMD4yZtKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx2:0yLCHHIJjiJcbI03GBc3ucY5DCSjX
- TLSH T106847B04BAA4F0F6D995043800EBAF36967EB4281726CBC7E354CE5D9A113C3A93579F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-19_0abc021a5aa3dc8d4c3da2b74bca98ab_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-10-19_0abc021a5aa3dc8d4c3da2b74bca98ab_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- SHA256 4b85ea7bc9668ba49ebdee97b27df8436d150a8b8ffa302d640ecb277b156042
- MD5 0abc021a5aa3dc8d4c3da2b74bca98ab
- SHA1 7666829b005f7ece5b4d734e722df217f5f60e3f
- SHA512 23dde8d64f35d23b4b10e832a22df97b9ad571610c7e85d30ec736afceb94cd749c94cf9be7784ed628b875dbed780a5a8f4ab87838afd2704a8a11edc409256
- SSDEEP 3072:41UeyLCFVaMD4yZtKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx2:0yLCHHIJjiJcbI03GBc3ucY5DCSjX
- TLSH T106847B04BAA4F0F6D995043800EBAF36967EB4281726CBC7E354CE5D9A113C3A93579F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE