General
- Target 2026-07-15_bf0021becbb3a8f036f9a60fba7d6f1b_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- Sample260715-smlsysfs2q
- SHA256 bf17ec3d2b54a90dfee0d935d8d1fcf6824b838c1915e9d4e29b095f685ce0a2
- MD5 bf0021becbb3a8f036f9a60fba7d6f1b
- SHA1 cdb6f3596c696c3538cba8e7246fd469d3a90d38
- SHA512 14c0b6d46e407d69ae1b3f8dd262746810b1fab64e7a9b83ec6e8472b15972a5c42790b3bbf0e84cd7c3bfd79f3a1f2616092a46adb5f37445c323b17eed24df
- SSDEEP 6144:yflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:yflfAsiVGjSGecvX
- TLSH T1A2747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-15_bf0021becbb3a8f036f9a60fba7d6f1b_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-07-15_bf0021becbb3a8f036f9a60fba7d6f1b_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- SHA256 bf17ec3d2b54a90dfee0d935d8d1fcf6824b838c1915e9d4e29b095f685ce0a2
- MD5 bf0021becbb3a8f036f9a60fba7d6f1b
- SHA1 cdb6f3596c696c3538cba8e7246fd469d3a90d38
- SHA512 14c0b6d46e407d69ae1b3f8dd262746810b1fab64e7a9b83ec6e8472b15972a5c42790b3bbf0e84cd7c3bfd79f3a1f2616092a46adb5f37445c323b17eed24df
- SSDEEP 6144:yflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:yflfAsiVGjSGecvX
- TLSH T1A2747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE