General
- Target 2026-07-28_bd459d0319eaebb0bee5a7eadeabbd81_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- Sample260728-ven98aad34
- SHA256 89373e86c76cbf91f4cc1702db025c8b10548821f6337bf21aa520dd67b57ba6
- MD5 bd459d0319eaebb0bee5a7eadeabbd81
- SHA1 90ec05da852e7340b812d92ebe7953e212c25bf9
- SHA512 c851fa413e7b653691bf325fd9373a4aebd78dc0a44ec223e9765ae342e7feec5ed66fe83fec98d1669a9ca09b0022ba010299af76d65720bb1e6401f83c14c0
- SSDEEP 6144:NflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:NflfAsiVGjSGecvX
- TLSH T14F747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-28_bd459d0319eaebb0bee5a7eadeabbd81_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-07-28_bd459d0319eaebb0bee5a7eadeabbd81_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- SHA256 89373e86c76cbf91f4cc1702db025c8b10548821f6337bf21aa520dd67b57ba6
- MD5 bd459d0319eaebb0bee5a7eadeabbd81
- SHA1 90ec05da852e7340b812d92ebe7953e212c25bf9
- SHA512 c851fa413e7b653691bf325fd9373a4aebd78dc0a44ec223e9765ae342e7feec5ed66fe83fec98d1669a9ca09b0022ba010299af76d65720bb1e6401f83c14c0
- SSDEEP 6144:NflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:NflfAsiVGjSGecvX
- TLSH T14F747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE