General
- Target 2026-05-11_6f8de34b981c24a1d299bf2c1dd7125d_amadey_darkgate_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 456KB
- Sample260511-bgp5rag19z
- SHA256 825e83d494453b6ad4ba53f1ff9b2e971bf9a152a9cf5f9fe4d4a55e72976380
- MD5 6f8de34b981c24a1d299bf2c1dd7125d
- SHA1 56be4491edb87f05b22a6e7cfc93ee8933931ace
- SHA512 8e8cfcc6c6c8531e3cec9790154a7ec80561aa1aca509a5913a1d8f2fc53b1bb20ef14ab9e56502b6e0fd5f107208d82fe7acb736168d00b62a985651c42895f
- SSDEEP 6144:BflfAsiL4lIJjiJcbI03GBc3ucY5DCSjXAflfAsiL4lIU:BflfAsiVGjSGecvXAflfAsiw
- TLSH T161A48D14BA94F0B2DC95047804EB9B36967EB4281726CBC7F754CE9D9A113C3A9343AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-05-11_6f8de34b981c24a1d299bf2c1dd7125d_amadey_darkgate_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260130-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-11_6f8de34b981c24a1d299bf2c1dd7125d_amadey_darkgate_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win11-20260130-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-05-11_6f8de34b981c24a1d299bf2c1dd7125d_amadey_darkgate_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 456KB
- SHA256 825e83d494453b6ad4ba53f1ff9b2e971bf9a152a9cf5f9fe4d4a55e72976380
- MD5 6f8de34b981c24a1d299bf2c1dd7125d
- SHA1 56be4491edb87f05b22a6e7cfc93ee8933931ace
- SHA512 8e8cfcc6c6c8531e3cec9790154a7ec80561aa1aca509a5913a1d8f2fc53b1bb20ef14ab9e56502b6e0fd5f107208d82fe7acb736168d00b62a985651c42895f
- SSDEEP 6144:BflfAsiL4lIJjiJcbI03GBc3ucY5DCSjXAflfAsiL4lIU:BflfAsiVGjSGecvXAflfAsiw
- TLSH T161A48D14BA94F0B2DC95047804EB9B36967EB4281726CBC7F754CE9D9A113C3A9343AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10