General
- Target 2026-07-30_1e7d2a59d3cdc30990465ca399c06727_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- Sample260730-wp2hzaej5z
- SHA256 2fe507689f1cb768ea6f0ddf5309c779bf11414d9f3f68e8facd66af7797c5f8
- MD5 1e7d2a59d3cdc30990465ca399c06727
- SHA1 9c7a1a55c398360517b30285048e9899812e712a
- SHA512 f822c7e2ce70b60f0c5ab7dcf30c7fe257dcc54d96a9d9db698515e21013743101736ba2d0da0f8030eee826c22a6d965313635d5a1b305c525e1e6a503c7596
- SSDEEP 6144:/flfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:/flfAsiVGjSGecvX
- TLSH T173747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-30_1e7d2a59d3cdc30990465ca399c06727_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-07-30_1e7d2a59d3cdc30990465ca399c06727_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- SHA256 2fe507689f1cb768ea6f0ddf5309c779bf11414d9f3f68e8facd66af7797c5f8
- MD5 1e7d2a59d3cdc30990465ca399c06727
- SHA1 9c7a1a55c398360517b30285048e9899812e712a
- SHA512 f822c7e2ce70b60f0c5ab7dcf30c7fe257dcc54d96a9d9db698515e21013743101736ba2d0da0f8030eee826c22a6d965313635d5a1b305c525e1e6a503c7596
- SSDEEP 6144:/flfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:/flfAsiVGjSGecvX
- TLSH T173747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE