General
- Target 2026-07-23_061a10e4f0c2355a4755d8edf4dfa567_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- Sample260723-mcaeaazygx
- SHA256 20778cd665486ef7f1c131f605df3f3dba8ebac8b48300aaae2eb9f66c3f3bb2
- MD5 061a10e4f0c2355a4755d8edf4dfa567
- SHA1 095044333065a6e7741b5c6fcf35688ff62b6e5e
- SHA512 7d17beb6f33c3710f796c9bdd433f72655956d374c3e685426b54b490b4430a386d50b0b7236105324c6aa0a883e2cf9cf805c86acdb1a7bf8de5f4fbac277ac
- SSDEEP 3072:zflfAsiLHEaML4yrtKOsNi6cWgOEkbaFK:zflfAsiL4lIJ
- TLSH T10C848C42F5C9D072E84118F0187BDB35467DB8780B396AD7FB921E586E922D1B83836F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-23_061a10e4f0c2355a4755d8edf4dfa567_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-07-23_061a10e4f0c2355a4755d8edf4dfa567_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- SHA256 20778cd665486ef7f1c131f605df3f3dba8ebac8b48300aaae2eb9f66c3f3bb2
- MD5 061a10e4f0c2355a4755d8edf4dfa567
- SHA1 095044333065a6e7741b5c6fcf35688ff62b6e5e
- SHA512 7d17beb6f33c3710f796c9bdd433f72655956d374c3e685426b54b490b4430a386d50b0b7236105324c6aa0a883e2cf9cf805c86acdb1a7bf8de5f4fbac277ac
- SSDEEP 3072:zflfAsiLHEaML4yrtKOsNi6cWgOEkbaFK:zflfAsiL4lIJ
- TLSH T10C848C42F5C9D072E84118F0187BDB35467DB8780B396AD7FB921E586E922D1B83836F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE