General
- Target 2026-04-24_2af84f77c18947c6477804fb22acee41_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- Sample260424-pradyah16w
- SHA256 2b3e1daf2776845a17ccfac7ba44761363f05461423e532c25ca0319c63e7361
- MD5 2af84f77c18947c6477804fb22acee41
- SHA1 33987223fe734876edd59f6b0cc70225bf816377
- SHA512 0304c8537281e5944f3a1b7e698bfef858267dadb2cb675cf79d19a777e517070548b891a4bb787a367d41b77abf25c88d41c8f55499a157e1fd8280329aa3a8
- SSDEEP 3072:HflfAsiLHEaML4yrtKOsNi6cWgOEkbaFK:HflfAsiL4lIJ
- TLSH T1FE848C42F5C9D072E84118F0146BDB35467EB8780B356AD7FB921E586E923D1B83836F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-04-24_2af84f77c18947c6477804fb22acee41_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260130-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-04-24_2af84f77c18947c6477804fb22acee41_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- SHA256 2b3e1daf2776845a17ccfac7ba44761363f05461423e532c25ca0319c63e7361
- MD5 2af84f77c18947c6477804fb22acee41
- SHA1 33987223fe734876edd59f6b0cc70225bf816377
- SHA512 0304c8537281e5944f3a1b7e698bfef858267dadb2cb675cf79d19a777e517070548b891a4bb787a367d41b77abf25c88d41c8f55499a157e1fd8280329aa3a8
- SSDEEP 3072:HflfAsiLHEaML4yrtKOsNi6cWgOEkbaFK:HflfAsiL4lIJ
- TLSH T1FE848C42F5C9D072E84118F0146BDB35467EB8780B356AD7FB921E586E923D1B83836F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE