General
- Target 2026-08-05_8043df1d08f36fb991d6b3ac00df0ed7_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- Sample260805-gk41zaed46
- SHA256 4a846438bd86dbcd839e167e6512e4f42488e01e3440127384782ee17111fc97
- MD5 8043df1d08f36fb991d6b3ac00df0ed7
- SHA1 ae439472dacab54f571b07a661a395463be6ea0e
- SHA512 62584ee1d720af22ddb45dd6a4f4b928be409c63d6681cb7fbb52ef0c7a9c572682c6e13c52e5105c739776374c7f4d859b414944b23f297af1ab4876c7d5fa8
- SSDEEP 6144:TflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:TflfAsiVGjSGecvX
- TLSH T1A3747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-05_8043df1d08f36fb991d6b3ac00df0ed7_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-08-05_8043df1d08f36fb991d6b3ac00df0ed7_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- SHA256 4a846438bd86dbcd839e167e6512e4f42488e01e3440127384782ee17111fc97
- MD5 8043df1d08f36fb991d6b3ac00df0ed7
- SHA1 ae439472dacab54f571b07a661a395463be6ea0e
- SHA512 62584ee1d720af22ddb45dd6a4f4b928be409c63d6681cb7fbb52ef0c7a9c572682c6e13c52e5105c739776374c7f4d859b414944b23f297af1ab4876c7d5fa8
- SSDEEP 6144:TflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:TflfAsiVGjSGecvX
- TLSH T1A3747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE