General
- Target 2026-07-21_5a8f284fe5ccc2865109f6c73e794a5d_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- Sample260721-vvtvms1fmb
- SHA256 77c8a731bd7d644640a85ed780faff51fbe43c45bfad3412f387cc89041e71e5
- MD5 5a8f284fe5ccc2865109f6c73e794a5d
- SHA1 65647db51cf91a5d633cdb22936191d903eb8bde
- SHA512 070807377ec3044894f3a2d280da491673c69e9a48926e9e879e274bdc0183d562a52c0a58f120049101d1ce70f2e50045a22a85ff25cb859deca89b6cd3fb92
- SSDEEP 6144:sflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:sflfAsiVGjSGecvX
- TLSH T1C9747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-21_5a8f284fe5ccc2865109f6c73e794a5d_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-07-21_5a8f284fe5ccc2865109f6c73e794a5d_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- SHA256 77c8a731bd7d644640a85ed780faff51fbe43c45bfad3412f387cc89041e71e5
- MD5 5a8f284fe5ccc2865109f6c73e794a5d
- SHA1 65647db51cf91a5d633cdb22936191d903eb8bde
- SHA512 070807377ec3044894f3a2d280da491673c69e9a48926e9e879e274bdc0183d562a52c0a58f120049101d1ce70f2e50045a22a85ff25cb859deca89b6cd3fb92
- SSDEEP 6144:sflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:sflfAsiVGjSGecvX
- TLSH T1C9747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE