General
- Target 2026-08-10_cb024cb40adb4687dcd7c8541fb955eb_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- Sample260810-qmskdsvtew
- SHA256 c3fa1f204fcbfd8476a233b8fcb02c34b19344aa8b3ef0ea61957704c8f4b1da
- MD5 cb024cb40adb4687dcd7c8541fb955eb
- SHA1 2f7e92384936a4bd9779abf33eab10c1b1e2eb02
- SHA512 65d426a7ddfea4be822cfd29ee8e6e9b786c2dd0f7abf8aa6a89c845f07258dd07fae64f843c9b68478706b90f2168b58cb97cd26a4448337b915faaa1d354b9
- SSDEEP 6144:UflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:UflfAsiVGjSGecvX
- TLSH T166747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-10_cb024cb40adb4687dcd7c8541fb955eb_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-08-10_cb024cb40adb4687dcd7c8541fb955eb_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- SHA256 c3fa1f204fcbfd8476a233b8fcb02c34b19344aa8b3ef0ea61957704c8f4b1da
- MD5 cb024cb40adb4687dcd7c8541fb955eb
- SHA1 2f7e92384936a4bd9779abf33eab10c1b1e2eb02
- SHA512 65d426a7ddfea4be822cfd29ee8e6e9b786c2dd0f7abf8aa6a89c845f07258dd07fae64f843c9b68478706b90f2168b58cb97cd26a4448337b915faaa1d354b9
- SSDEEP 6144:UflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:UflfAsiVGjSGecvX
- TLSH T166747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE