General
- Target 2026-08-12_f784ebd9ee9682e347663fba7f2a9894_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 722KB
- Sample260812-3rtz8sfd36
- SHA256 2819826ee82b6fa3c051d8e91b93a22f32bf955c29e2bb61a7cebe534b8f884a
- MD5 f784ebd9ee9682e347663fba7f2a9894
- SHA1 dab6b3b5f0dcb63c5326b6030e5e552556182690
- SHA512 729f1ee023862796ee93c00f7997cb6c1d40ea26ad3ab5b7eeefcd138af099500723ad0c991b5f4d11a1683826297d939ad2c2bc71b1dd7462f848573973b4cc
- SSDEEP 12288:KflfAsiVGjSGecvXAflfAsiVGjSGecvX:GMcfcMcf
- TLSH T167F47C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_f784ebd9ee9682e347663fba7f2a9894_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-08-12_f784ebd9ee9682e347663fba7f2a9894_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 722KB
- SHA256 2819826ee82b6fa3c051d8e91b93a22f32bf955c29e2bb61a7cebe534b8f884a
- MD5 f784ebd9ee9682e347663fba7f2a9894
- SHA1 dab6b3b5f0dcb63c5326b6030e5e552556182690
- SHA512 729f1ee023862796ee93c00f7997cb6c1d40ea26ad3ab5b7eeefcd138af099500723ad0c991b5f4d11a1683826297d939ad2c2bc71b1dd7462f848573973b4cc
- SSDEEP 12288:KflfAsiVGjSGecvXAflfAsiVGjSGecvX:GMcfcMcf
- TLSH T167F47C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE