General
- Target 2026-10-22_7a60d763c7114bd0c6cf389267e69795_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- Sample261024-jlv6kas1cs
- SHA256 0cd4367d21eae674407c95f5993419347e07ab8ea7045aa66d2c3a5d37a4e362
- MD5 7a60d763c7114bd0c6cf389267e69795
- SHA1 ff233237a8a2be86905a8e96024ba02171331ada
- SHA512 bb320108f54d439bf3f8204fa0ed5ad8440528f743a3862f3c80aa5f07afc1497151d9eee358806a4b61a03c099f5b3f015286bf5857222b7607088ff1447d6f
- SSDEEP 3072:B1UeyLCFVaMD4yZtKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx2:1yLCHHIJjiJcbI03GBc3ucY5DCSjX
- TLSH T137847B04BAA4F0F6D995043800EBAF36967EB4281726CBC7E354CE5D9A113C3A93579F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-22_7a60d763c7114bd0c6cf389267e69795_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-10-22_7a60d763c7114bd0c6cf389267e69795_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- SHA256 0cd4367d21eae674407c95f5993419347e07ab8ea7045aa66d2c3a5d37a4e362
- MD5 7a60d763c7114bd0c6cf389267e69795
- SHA1 ff233237a8a2be86905a8e96024ba02171331ada
- SHA512 bb320108f54d439bf3f8204fa0ed5ad8440528f743a3862f3c80aa5f07afc1497151d9eee358806a4b61a03c099f5b3f015286bf5857222b7607088ff1447d6f
- SSDEEP 3072:B1UeyLCFVaMD4yZtKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx2:1yLCHHIJjiJcbI03GBc3ucY5DCSjX
- TLSH T137847B04BAA4F0F6D995043800EBAF36967EB4281726CBC7E354CE5D9A113C3A93579F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE