General
- Target 2026-08-07_c5167c35e404654617d22c78bd43e45c_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop_vidar
- Size 4.1MB
- Sample260808-a1wwzay1ht
- SHA256 fa647f77c97a93ff120e8ed5afd18c5eaf72a137ea8004c01be866f91ed6db23
- MD5 c5167c35e404654617d22c78bd43e45c
- SHA1 9e18f982c576c388f63ac8b8a4044f6eea612452
- SHA512 7902ef9e4994bf6ef129dea3db4d651b211ff404dc9ceb4a8252e7feb47f0e73a66c3728c269e951c8b8ae74120288677fc6728268dc996926afe8640859695f
- SSDEEP 49152:IWSytLoqUCInTUCIabjKoh9WEbtL2tLlZqhaK6zbfqdlIhKPgssSt2gTBMO+Yroo:IstsF7IabjKoh9WyV2Vlx/hv7St0Ogg
- TLSH T145167D216BF48035E1B7A6B1B9B68366D9727C604B7086CF6380773D5F729D09A72323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_c5167c35e404654617d22c78bd43e45c_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop_vidar.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_c5167c35e404654617d22c78bd43e45c_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop_vidar.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_c5167c35e404654617d22c78bd43e45c_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop_vidar
- Size 4.1MB
- SHA256 fa647f77c97a93ff120e8ed5afd18c5eaf72a137ea8004c01be866f91ed6db23
- MD5 c5167c35e404654617d22c78bd43e45c
- SHA1 9e18f982c576c388f63ac8b8a4044f6eea612452
- SHA512 7902ef9e4994bf6ef129dea3db4d651b211ff404dc9ceb4a8252e7feb47f0e73a66c3728c269e951c8b8ae74120288677fc6728268dc996926afe8640859695f
- SSDEEP 49152:IWSytLoqUCInTUCIabjKoh9WEbtL2tLlZqhaK6zbfqdlIhKPgssSt2gTBMO+Yroo:IstsF7IabjKoh9WyV2Vlx/hv7St0Ogg
- TLSH T145167D216BF48035E1B7A6B1B9B68366D9727C604B7086CF6380773D5F729D09A72323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.