General
- Target 2026-07-06_04f99779ec9f1b244bd648aa7d436193_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- Sample260706-2r7ewsc18s
- SHA256 08e104295682d7fa42a7f8ee5c4c44f321d47231d93b5a0cacc89e9cf5e7db30
- MD5 04f99779ec9f1b244bd648aa7d436193
- SHA1 7fa3e2510acb9138952068126e764e26472da7b9
- SHA512 dcb007a51fa7bc6bbdd63b483ee137eef946415ff47d7d6d03bb8b524dd651c7d2ee91244ba639c5e2e8d6d50500afddd382f0a24827969f2bcf61690095aff2
- SSDEEP 6144:tflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:tflfAsiVGjSGecvX
- TLSH T135747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-06_04f99779ec9f1b244bd648aa7d436193_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-07-06_04f99779ec9f1b244bd648aa7d436193_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- SHA256 08e104295682d7fa42a7f8ee5c4c44f321d47231d93b5a0cacc89e9cf5e7db30
- MD5 04f99779ec9f1b244bd648aa7d436193
- SHA1 7fa3e2510acb9138952068126e764e26472da7b9
- SHA512 dcb007a51fa7bc6bbdd63b483ee137eef946415ff47d7d6d03bb8b524dd651c7d2ee91244ba639c5e2e8d6d50500afddd382f0a24827969f2bcf61690095aff2
- SSDEEP 6144:tflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:tflfAsiVGjSGecvX
- TLSH T135747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE