General
- Target 2026-08-04_18712ccf5b90b15284ad7db4c98aa15a_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- Sample260804-j4a84svcpe
- SHA256 e5db6ab5ac0c25dcf4fdff2e4fde4e302a9043b707fc5b7d487b0abab7ebe212
- MD5 18712ccf5b90b15284ad7db4c98aa15a
- SHA1 2f38b9714d13ca08865f16c0d9da01a3e483c034
- SHA512 47a868425fcee69d717e4f1cca2058a0fbd94e792d63a000637bf61ad94a02891a32fa1385dce9528db6bc0645a6d326b78a95e869fdc4cf0df5bfd0cf71b954
- SSDEEP 6144:G+flfAsiL4lIJjiJcbI03GBc3ucY5DCSjXn:G+flfAsiVGjSGecvXn
- TLSH T177747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-04_18712ccf5b90b15284ad7db4c98aa15a_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-08-04_18712ccf5b90b15284ad7db4c98aa15a_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- SHA256 e5db6ab5ac0c25dcf4fdff2e4fde4e302a9043b707fc5b7d487b0abab7ebe212
- MD5 18712ccf5b90b15284ad7db4c98aa15a
- SHA1 2f38b9714d13ca08865f16c0d9da01a3e483c034
- SHA512 47a868425fcee69d717e4f1cca2058a0fbd94e792d63a000637bf61ad94a02891a32fa1385dce9528db6bc0645a6d326b78a95e869fdc4cf0df5bfd0cf71b954
- SSDEEP 6144:G+flfAsiL4lIJjiJcbI03GBc3ucY5DCSjXn:G+flfAsiVGjSGecvXn
- TLSH T177747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE