General
- Target 2026-04-16_2cbb84558f1a209748d7a2023544dd47_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- Sample260416-ee1egse16p
- SHA256 47b6100243b7ad0787bae0bcfa28a61fd8b4a1ed2c4e000d3b73d7598f499f86
- MD5 2cbb84558f1a209748d7a2023544dd47
- SHA1 10259e0a3566a5491a6920e97431d70615662f95
- SHA512 3a9aead413e42b47bfc73aa3184064c1572b812e89dce99f9d630eaa24a950bd848b6ae8825afa70e13d9d02052871f5940afe1ef197eb19ed45eec4b6d14748
- SSDEEP 3072:YflfAsiLHEaML4yrtKOsNi6cWgOEkbaFK:YflfAsiL4lIJ
- TLSH T182848C42F5C9D072E84118F0147BDB35467EB8780B356AD7FB921E586E922D1B83836F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-04-16_2cbb84558f1a209748d7a2023544dd47_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260130-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-04-16_2cbb84558f1a209748d7a2023544dd47_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- SHA256 47b6100243b7ad0787bae0bcfa28a61fd8b4a1ed2c4e000d3b73d7598f499f86
- MD5 2cbb84558f1a209748d7a2023544dd47
- SHA1 10259e0a3566a5491a6920e97431d70615662f95
- SHA512 3a9aead413e42b47bfc73aa3184064c1572b812e89dce99f9d630eaa24a950bd848b6ae8825afa70e13d9d02052871f5940afe1ef197eb19ed45eec4b6d14748
- SSDEEP 3072:YflfAsiLHEaML4yrtKOsNi6cWgOEkbaFK:YflfAsiL4lIJ
- TLSH T182848C42F5C9D072E84118F0147BDB35467EB8780B356AD7FB921E586E922D1B83836F
- MD5 SHA1 SHA512 SSDEEP TLSH
Executes dropped EXE