General
- Target 2026-06-29_f1f801cf1073f292bfdcb6f8865b7162_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- Sample260630-bwacvaby9s
- SHA256 31a4e12193f0e68b37a611be7afcb25d72c42de970c00e6dc24a2ec15eeac1e4
- MD5 f1f801cf1073f292bfdcb6f8865b7162
- SHA1 68f8a99cd5ea34c0ac18f29dc7b65db4a57717da
- SHA512 a53a173fff86fa4b075c1dc12a9d106b14f398ea4b6508895de4f47f2487c0da4f9101d4ac25eb503cb3d734e0481082de13535cab183c1ffc3911a232a168b0
- SSDEEP 6144:TflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:TflfAsiVGjSGecvX
- TLSH T14D747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-06-29_f1f801cf1073f292bfdcb6f8865b7162_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-06-29_f1f801cf1073f292bfdcb6f8865b7162_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- SHA256 31a4e12193f0e68b37a611be7afcb25d72c42de970c00e6dc24a2ec15eeac1e4
- MD5 f1f801cf1073f292bfdcb6f8865b7162
- SHA1 68f8a99cd5ea34c0ac18f29dc7b65db4a57717da
- SHA512 a53a173fff86fa4b075c1dc12a9d106b14f398ea4b6508895de4f47f2487c0da4f9101d4ac25eb503cb3d734e0481082de13535cab183c1ffc3911a232a168b0
- SSDEEP 6144:TflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:TflfAsiVGjSGecvX
- TLSH T14D747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL