General
- Target 2026-07-12_6fcf4720ab78707bf2c05d775db7d7c4_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- Sample260712-p2asfsh19q
- SHA256 cf1771d1fa357f382926196285b9d1fedc7db3cf2c4176ac0fcfd45d9438e597
- MD5 6fcf4720ab78707bf2c05d775db7d7c4
- SHA1 9f3d0e2a54a3790b25a1c5f03ed593349d04ce44
- SHA512 691ad8179f0a266538b2bf63682aba0fdbe5b53cfdb71fc6214ddd33ffb50501eb2c035faa2748aa88f4d7c50aad7254658fa0f8d32a7972282f0022fe81a185
- SSDEEP 6144:mflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:mflfAsiVGjSGecvX
- TLSH T138747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-12_6fcf4720ab78707bf2c05d775db7d7c4_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-07-12_6fcf4720ab78707bf2c05d775db7d7c4_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- SHA256 cf1771d1fa357f382926196285b9d1fedc7db3cf2c4176ac0fcfd45d9438e597
- MD5 6fcf4720ab78707bf2c05d775db7d7c4
- SHA1 9f3d0e2a54a3790b25a1c5f03ed593349d04ce44
- SHA512 691ad8179f0a266538b2bf63682aba0fdbe5b53cfdb71fc6214ddd33ffb50501eb2c035faa2748aa88f4d7c50aad7254658fa0f8d32a7972282f0022fe81a185
- SSDEEP 6144:mflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:mflfAsiVGjSGecvX
- TLSH T138747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE