General
- Target 2026-07-17_b9b1d20c31045eb2a2508657f2aaab34_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- Sample260718-ctd4pads3n
- SHA256 419419695477523c0f7f0251624105f13cbdf61a636e6a65701ee2b9d7c54405
- MD5 b9b1d20c31045eb2a2508657f2aaab34
- SHA1 770645124fde9387bc2e7663cb0948439d8feb8c
- SHA512 c4ecd4e35f06e361680766a85a1aa1f1e367a3af66751ddb0f3c172a1e0c8665879ac7631762be6ecd0f07c2e8ae4584759347e320a9d9f5702387cbdd1c4c4b
- SSDEEP 6144:XflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:XflfAsiVGjSGecvX
- TLSH T119747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-17_b9b1d20c31045eb2a2508657f2aaab34_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-07-17_b9b1d20c31045eb2a2508657f2aaab34_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- SHA256 419419695477523c0f7f0251624105f13cbdf61a636e6a65701ee2b9d7c54405
- MD5 b9b1d20c31045eb2a2508657f2aaab34
- SHA1 770645124fde9387bc2e7663cb0948439d8feb8c
- SHA512 c4ecd4e35f06e361680766a85a1aa1f1e367a3af66751ddb0f3c172a1e0c8665879ac7631762be6ecd0f07c2e8ae4584759347e320a9d9f5702387cbdd1c4c4b
- SSDEEP 6144:XflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:XflfAsiVGjSGecvX
- TLSH T119747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE