General
- Target 2026-07-15_8c6c7a2d4fca22dc342982fe46baa64f_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- Sample260715-e87ewsew6s
- SHA256 7e3ea770bd10ac4dc31d93514b7552372a2317869b6040ccdfb917ef6c201242
- MD5 8c6c7a2d4fca22dc342982fe46baa64f
- SHA1 811ba5fedc7fdf09427a6d363d9419bc5d1e1645
- SHA512 6afdafeb4f27f96f8d3d27e7380adfd7f785e5da63adcee599b8b9a37cf0a568f3921de835a0705e78ec4920bd39b4984d1aa1de27287f9d856b8e9736ed7305
- SSDEEP 6144:AflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:AflfAsiVGjSGecvX
- TLSH T1CB747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-15_8c6c7a2d4fca22dc342982fe46baa64f_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-07-15_8c6c7a2d4fca22dc342982fe46baa64f_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- SHA256 7e3ea770bd10ac4dc31d93514b7552372a2317869b6040ccdfb917ef6c201242
- MD5 8c6c7a2d4fca22dc342982fe46baa64f
- SHA1 811ba5fedc7fdf09427a6d363d9419bc5d1e1645
- SHA512 6afdafeb4f27f96f8d3d27e7380adfd7f785e5da63adcee599b8b9a37cf0a568f3921de835a0705e78ec4920bd39b4984d1aa1de27287f9d856b8e9736ed7305
- SSDEEP 6144:AflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:AflfAsiVGjSGecvX
- TLSH T1CB747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE