General
- Target 2026-07-15_ae2eab378cea0c9d363a419282f3a0cf_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- Sample260715-nnnlqaa13p
- SHA256 d0e4e58eec195f0d79999b12d9ac4d342ec3ed2a8798da451139150001ccda16
- MD5 ae2eab378cea0c9d363a419282f3a0cf
- SHA1 e22c238df28f4dfad37e82e8e2de91194cd57e34
- SHA512 d3979b1f37aa0787cb6ffc395f7df3a2dd4d6599062a25fc83adee8026c7f2632e0801b6ce747a46b32c559162f41f32d6bcbf462b8669bcf4e168a898aa9049
- SSDEEP 6144:fflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:fflfAsiVGjSGecvX
- TLSH T1B2747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-15_ae2eab378cea0c9d363a419282f3a0cf_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_ae2eab378cea0c9d363a419282f3a0cf_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-07-15_ae2eab378cea0c9d363a419282f3a0cf_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- SHA256 d0e4e58eec195f0d79999b12d9ac4d342ec3ed2a8798da451139150001ccda16
- MD5 ae2eab378cea0c9d363a419282f3a0cf
- SHA1 e22c238df28f4dfad37e82e8e2de91194cd57e34
- SHA512 d3979b1f37aa0787cb6ffc395f7df3a2dd4d6599062a25fc83adee8026c7f2632e0801b6ce747a46b32c559162f41f32d6bcbf462b8669bcf4e168a898aa9049
- SSDEEP 6144:fflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:fflfAsiVGjSGecvX
- TLSH T1B2747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE