General
- Target 2026-08-08_4a96c750d421edd5cf767d6ea62db338_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- Sample260808-rzbyvaydpb
- SHA256 dacf73cf73b2a7701fd1216758c8ceebf71f8dd6cd25bc789d3cc7b6dbc8f21b
- MD5 4a96c750d421edd5cf767d6ea62db338
- SHA1 8fbad4f95695768310d4ac6695ac7a316fee8379
- SHA512 1cdf49889a11f6c102a5c0322e9aae5e74b547f8da3b24c2d28c2079d5f3676ce9e61e91004485967cecaeb0f1b5463880a931160aec1af4e2280dd9d4b0a703
- SSDEEP 3072:FflfAsiLHEaML4yrtKOsNi6cWgOEkbaFK:FflfAsiL4lIJ
- TLSH T1B5848C42F5C9D072E84118F0187BDB35467EB8780B356AD7FB921E586E922D1B83836F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-08_4a96c750d421edd5cf767d6ea62db338_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-08-08_4a96c750d421edd5cf767d6ea62db338_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- SHA256 dacf73cf73b2a7701fd1216758c8ceebf71f8dd6cd25bc789d3cc7b6dbc8f21b
- MD5 4a96c750d421edd5cf767d6ea62db338
- SHA1 8fbad4f95695768310d4ac6695ac7a316fee8379
- SHA512 1cdf49889a11f6c102a5c0322e9aae5e74b547f8da3b24c2d28c2079d5f3676ce9e61e91004485967cecaeb0f1b5463880a931160aec1af4e2280dd9d4b0a703
- SSDEEP 3072:FflfAsiLHEaML4yrtKOsNi6cWgOEkbaFK:FflfAsiL4lIJ
- TLSH T1B5848C42F5C9D072E84118F0187BDB35467EB8780B356AD7FB921E586E922D1B83836F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE