General
- Target 2026-07-09_68f98fc4f7e3c6a5a973f3868cbbe93f_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 722KB
- Sample260709-py3dasaw8k
- SHA256 a9100af9d7b12f3e43c62acc9791dc4e7634c9d78d8f279b5f1568bfcd59b3b1
- MD5 68f98fc4f7e3c6a5a973f3868cbbe93f
- SHA1 4f750afeb0ad83b95993b9783e58775f6eaa72ff
- SHA512 62a69b92ebecda5630362be425b245068a95dab5a4bf4c51c0886647b54a787b8b36af3097bbc4695c7853d59996ee7c944a43598788a85e1ccff8bc28fe4669
- SSDEEP 12288:qflfAsiVGjSGecvXAflfAsiVGjSGecvX:mMcfcMcf
- TLSH T1E4F47C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_68f98fc4f7e3c6a5a973f3868cbbe93f_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-07-09_68f98fc4f7e3c6a5a973f3868cbbe93f_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 722KB
- SHA256 a9100af9d7b12f3e43c62acc9791dc4e7634c9d78d8f279b5f1568bfcd59b3b1
- MD5 68f98fc4f7e3c6a5a973f3868cbbe93f
- SHA1 4f750afeb0ad83b95993b9783e58775f6eaa72ff
- SHA512 62a69b92ebecda5630362be425b245068a95dab5a4bf4c51c0886647b54a787b8b36af3097bbc4695c7853d59996ee7c944a43598788a85e1ccff8bc28fe4669
- SSDEEP 12288:qflfAsiVGjSGecvXAflfAsiVGjSGecvX:mMcfcMcf
- TLSH T1E4F47C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE