General
- Target 2026-08-08_0955ccc9e56eef51b474663341c7ab0e_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- Sample260808-n75z4sdd53
- SHA256 9f17255c802137c46e4f41c9984b68b68f49bfd1a60d6a25d38e4634725dd2c2
- MD5 0955ccc9e56eef51b474663341c7ab0e
- SHA1 34b5e81fb8de47e7f4ce334c1218806c00a7a13c
- SHA512 9a42c981e3beba667d44a0bf0f8795cbd66dc5917b07922ddbc1df947cf32edb620a387ad774c82e8865f7492dfc1f8b30e722c80dd4a6fe33e23e4445ba3289
- SSDEEP 6144:9flfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:9flfAsiVGjSGecvX
- TLSH T10A747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-08_0955ccc9e56eef51b474663341c7ab0e_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-08-08_0955ccc9e56eef51b474663341c7ab0e_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- SHA256 9f17255c802137c46e4f41c9984b68b68f49bfd1a60d6a25d38e4634725dd2c2
- MD5 0955ccc9e56eef51b474663341c7ab0e
- SHA1 34b5e81fb8de47e7f4ce334c1218806c00a7a13c
- SHA512 9a42c981e3beba667d44a0bf0f8795cbd66dc5917b07922ddbc1df947cf32edb620a387ad774c82e8865f7492dfc1f8b30e722c80dd4a6fe33e23e4445ba3289
- SSDEEP 6144:9flfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:9flfAsiVGjSGecvX
- TLSH T10A747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE