General
- Target 2026-06-25_4f0dcb7e771b969b6d261e0ceef328ae_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- Sample260629-2ev64agx6x
- SHA256 22c457c91746aee814843f2c750a834edb530158bd74b66f8f68b67cb3ca29e3
- MD5 4f0dcb7e771b969b6d261e0ceef328ae
- SHA1 2053e6b57905b6d65337aabc900aae0f23744faa
- SHA512 61f74b51dfb53408600be699c009b13ac4f91aa9f7311cfa941dff99bff3226e1b107196dcb45a658b7841ea7de13ec666418ae1a90f36ff8ccb925a1db96ddf
- SSDEEP 6144:UflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:UflfAsiVGjSGecvX
- TLSH T1A7747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-06-25_4f0dcb7e771b969b6d261e0ceef328ae_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-06-25_4f0dcb7e771b969b6d261e0ceef328ae_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- SHA256 22c457c91746aee814843f2c750a834edb530158bd74b66f8f68b67cb3ca29e3
- MD5 4f0dcb7e771b969b6d261e0ceef328ae
- SHA1 2053e6b57905b6d65337aabc900aae0f23744faa
- SHA512 61f74b51dfb53408600be699c009b13ac4f91aa9f7311cfa941dff99bff3226e1b107196dcb45a658b7841ea7de13ec666418ae1a90f36ff8ccb925a1db96ddf
- SSDEEP 6144:UflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:UflfAsiVGjSGecvX
- TLSH T1A7747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE