General
- Target 2026-08-08_124585f32190466d7eb29df94818a830_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- Sample260808-epmw5szeja
- SHA256 92938b1dd3db82139ae80f4fccf2a6fdc3adbe8d0da87e1a36372abf737f1282
- MD5 124585f32190466d7eb29df94818a830
- SHA1 6a5664f4792caa15ba7541d7219cb4d5ea0b3358
- SHA512 ad493eb78e2c22e4f503e42377a949f925c1b8cfd072165f0dfa30f52e5914d4edfb589c864a7c573fd514010227d5300c0166b22479f5f5c5594d1c5f19b94d
- SSDEEP 6144:MflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:MflfAsiVGjSGecvX
- TLSH T1D6747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-08_124585f32190466d7eb29df94818a830_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-08-08_124585f32190466d7eb29df94818a830_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- SHA256 92938b1dd3db82139ae80f4fccf2a6fdc3adbe8d0da87e1a36372abf737f1282
- MD5 124585f32190466d7eb29df94818a830
- SHA1 6a5664f4792caa15ba7541d7219cb4d5ea0b3358
- SHA512 ad493eb78e2c22e4f503e42377a949f925c1b8cfd072165f0dfa30f52e5914d4edfb589c864a7c573fd514010227d5300c0166b22479f5f5c5594d1c5f19b94d
- SSDEEP 6144:MflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:MflfAsiVGjSGecvX
- TLSH T1D6747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE