General
- Target 2026-06-29_23b814796a42083b84ea088896414b48_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- Sample260630-n4rcjset7n
- SHA256 edd1dc171ce34fe75eb67ef3543126f15636ee3fdb2a235c357fedb366d7404a
- MD5 23b814796a42083b84ea088896414b48
- SHA1 f366429fe6a1a4f77f3f807e4b75eea84c37cc1e
- SHA512 da0c0c3919108ae1be3a647b6be4bc589954fbfe1a6ae9c7df6258e90b43f2a0c1b8369db7be5399c98a28564a161b24245bd5b2c4daeaf28b8f4ad7d07a723b
- SSDEEP 6144:kflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:kflfAsiVGjSGecvX
- TLSH T1E8747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-06-29_23b814796a42083b84ea088896414b48_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-06-29_23b814796a42083b84ea088896414b48_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- SHA256 edd1dc171ce34fe75eb67ef3543126f15636ee3fdb2a235c357fedb366d7404a
- MD5 23b814796a42083b84ea088896414b48
- SHA1 f366429fe6a1a4f77f3f807e4b75eea84c37cc1e
- SHA512 da0c0c3919108ae1be3a647b6be4bc589954fbfe1a6ae9c7df6258e90b43f2a0c1b8369db7be5399c98a28564a161b24245bd5b2c4daeaf28b8f4ad7d07a723b
- SSDEEP 6144:kflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:kflfAsiVGjSGecvX
- TLSH T1E8747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE