General
- Target 2026-07-23_18c71ee23b97b7300be83a72c4b53c00_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- Sample260723-r6ptaa1drf
- SHA256 e06ec653fe132c6bd38afb529d63ed263cdc0a5347985328fa71655b1191a23a
- MD5 18c71ee23b97b7300be83a72c4b53c00
- SHA1 50acf253839df3e914275857b1037e2a737160b9
- SHA512 7b50217988900071e99ec29c7fc75a01d2792d9aa7b72dbbe0010fb0e0a0cf87592d82f2c5d81eaa1eb83a60597447ad6c7542727e9defc28eae532cf5abaafb
- SSDEEP 6144:7flfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:7flfAsiVGjSGecvX
- TLSH T1A4747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-23_18c71ee23b97b7300be83a72c4b53c00_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-07-23_18c71ee23b97b7300be83a72c4b53c00_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- SHA256 e06ec653fe132c6bd38afb529d63ed263cdc0a5347985328fa71655b1191a23a
- MD5 18c71ee23b97b7300be83a72c4b53c00
- SHA1 50acf253839df3e914275857b1037e2a737160b9
- SHA512 7b50217988900071e99ec29c7fc75a01d2792d9aa7b72dbbe0010fb0e0a0cf87592d82f2c5d81eaa1eb83a60597447ad6c7542727e9defc28eae532cf5abaafb
- SSDEEP 6144:7flfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:7flfAsiVGjSGecvX
- TLSH T1A4747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE