General
- Target 2026-07-03_e4028b3596644c615a63d09f5e7c81e4_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- Sample260703-xd722sev3t
- SHA256 c8be2d58c39cf1b392c77d6a159b55a8c4b811ccf3dc67e4060b7af7b01c6cac
- MD5 e4028b3596644c615a63d09f5e7c81e4
- SHA1 dd9f04ae280a2ba6cda91b4afacc68c7d32b2df7
- SHA512 0afd45a2780465b9cff141a9293697c297322a54471afe7a40face47f08f4ca4b90c0ff9d0657c0950a142c0eee9fcfb2b3b21b4aacaa7c07d124d905f655d64
- SSDEEP 6144:TflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:TflfAsiVGjSGecvX
- TLSH T1F2747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-03_e4028b3596644c615a63d09f5e7c81e4_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-07-03_e4028b3596644c615a63d09f5e7c81e4_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- SHA256 c8be2d58c39cf1b392c77d6a159b55a8c4b811ccf3dc67e4060b7af7b01c6cac
- MD5 e4028b3596644c615a63d09f5e7c81e4
- SHA1 dd9f04ae280a2ba6cda91b4afacc68c7d32b2df7
- SHA512 0afd45a2780465b9cff141a9293697c297322a54471afe7a40face47f08f4ca4b90c0ff9d0657c0950a142c0eee9fcfb2b3b21b4aacaa7c07d124d905f655d64
- SSDEEP 6144:TflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:TflfAsiVGjSGecvX
- TLSH T1F2747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE