General
- Target 2026-08-05_fb1a7ece0569d03c1734859f54b5d2db_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- Sample260805-b3yzsabf98
- SHA256 9d85044eb944102c4409d9f75d39de62e82f6fb2925ee71ac6025fbcf4216c5e
- MD5 fb1a7ece0569d03c1734859f54b5d2db
- SHA1 ed1812c2df9c6e76c87d2c098f25683e8bb2c17f
- SHA512 be7141bc7761a5955c54932b1092bc62ea7add85e42325b50dc51c1a52e405849a6a6d92015da8a5e5d145144ec7966f35e5d73b50b6a6a54cb0e9dd4eeb754d
- SSDEEP 6144:uflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:uflfAsiVGjSGecvX
- TLSH T124747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-05_fb1a7ece0569d03c1734859f54b5d2db_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-08-05_fb1a7ece0569d03c1734859f54b5d2db_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- SHA256 9d85044eb944102c4409d9f75d39de62e82f6fb2925ee71ac6025fbcf4216c5e
- MD5 fb1a7ece0569d03c1734859f54b5d2db
- SHA1 ed1812c2df9c6e76c87d2c098f25683e8bb2c17f
- SHA512 be7141bc7761a5955c54932b1092bc62ea7add85e42325b50dc51c1a52e405849a6a6d92015da8a5e5d145144ec7966f35e5d73b50b6a6a54cb0e9dd4eeb754d
- SSDEEP 6144:uflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:uflfAsiVGjSGecvX
- TLSH T124747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE