General
- Target 2026-08-09_c47bc56d97b592416a183313fa0ee86f_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- Sample260809-q1cfbsfq2w
- SHA256 236690b9684c4aa8ec3958fae666c88006ba8a85d84218c0c9430200616e8ed9
- MD5 c47bc56d97b592416a183313fa0ee86f
- SHA1 28753a43a2803bb33de41421f5d395182545fb5e
- SHA512 4fdbefec42234c63d5271775f8d3344ee9cd96f233a5319d56b95792a24754ad2ae8a9c519e29577b5ef2811a7bdbb68c6b47ba4be9c6e1a368da1b04fa7bc2d
- SSDEEP 6144:KflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:KflfAsiVGjSGecvX
- TLSH T1BF747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-09_c47bc56d97b592416a183313fa0ee86f_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-08-09_c47bc56d97b592416a183313fa0ee86f_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- SHA256 236690b9684c4aa8ec3958fae666c88006ba8a85d84218c0c9430200616e8ed9
- MD5 c47bc56d97b592416a183313fa0ee86f
- SHA1 28753a43a2803bb33de41421f5d395182545fb5e
- SHA512 4fdbefec42234c63d5271775f8d3344ee9cd96f233a5319d56b95792a24754ad2ae8a9c519e29577b5ef2811a7bdbb68c6b47ba4be9c6e1a368da1b04fa7bc2d
- SSDEEP 6144:KflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:KflfAsiVGjSGecvX
- TLSH T1BF747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE