General
- Target 2026-07-18_faba365f94ff7886ea4766e752a87dd4_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- Sample260718-l2whdafx4j
- SHA256 d1209114b78c4c1389e1a2090824b2b257d639ead31d4ac3915b2fb45d6b6201
- MD5 faba365f94ff7886ea4766e752a87dd4
- SHA1 b7a4a71ff9920f511c7a523dab8871d25d9135d8
- SHA512 89a892be687b5e913c8229e508b37f5672db65850d879e3f69803ae3e6af00481b14fe6ff40768570dd3e31ae3f29f61537f2dfb27f051220ccaae8946c6d716
- SSDEEP 6144:JflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:JflfAsiVGjSGecvX
- TLSH T176747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-18_faba365f94ff7886ea4766e752a87dd4_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-07-18_faba365f94ff7886ea4766e752a87dd4_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- SHA256 d1209114b78c4c1389e1a2090824b2b257d639ead31d4ac3915b2fb45d6b6201
- MD5 faba365f94ff7886ea4766e752a87dd4
- SHA1 b7a4a71ff9920f511c7a523dab8871d25d9135d8
- SHA512 89a892be687b5e913c8229e508b37f5672db65850d879e3f69803ae3e6af00481b14fe6ff40768570dd3e31ae3f29f61537f2dfb27f051220ccaae8946c6d716
- SSDEEP 6144:JflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:JflfAsiVGjSGecvX
- TLSH T176747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE