General
- Target 2026-06-27_9ca6add0a724064c8c2559487cbdfa3a_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- Sample260629-e9xbbads5y
- SHA256 f20e9fcb60b72cdf8a124922227640c7a9ef7f2ff59b51384b7cd8f2d3985f0a
- MD5 9ca6add0a724064c8c2559487cbdfa3a
- SHA1 1e603cf00f013d06cc00b80314d0169d250775e2
- SHA512 4573caba797d39f8886445c1f5a65ef34569c1cd64f2f6d171ee6c25503c72d71e07ed14b9579b3649839dd7e5b2f0acfb63e94ee417fc47af5dc99da38c500d
- SSDEEP 6144:1flfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:1flfAsiVGjSGecvX
- TLSH T166747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-06-27_9ca6add0a724064c8c2559487cbdfa3a_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-06-27_9ca6add0a724064c8c2559487cbdfa3a_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- SHA256 f20e9fcb60b72cdf8a124922227640c7a9ef7f2ff59b51384b7cd8f2d3985f0a
- MD5 9ca6add0a724064c8c2559487cbdfa3a
- SHA1 1e603cf00f013d06cc00b80314d0169d250775e2
- SHA512 4573caba797d39f8886445c1f5a65ef34569c1cd64f2f6d171ee6c25503c72d71e07ed14b9579b3649839dd7e5b2f0acfb63e94ee417fc47af5dc99da38c500d
- SSDEEP 6144:1flfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:1flfAsiVGjSGecvX
- TLSH T166747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE