General
- Target 2026-08-13_6c945c53fe3265c1fd1b7a30e598b243_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- Sample260813-wv15dsdn7v
- SHA256 0febb474fa7e487c218d124e082ef358d5a27a64c2e3b420a97aadbe2786aea3
- MD5 6c945c53fe3265c1fd1b7a30e598b243
- SHA1 1390531ee0294906ac4b27a4c7a47b57d791ac9b
- SHA512 677dd719b9be632aecc8ea690b6ad94fc55609326f7ff9778b101a6c79920000fe5c1a8ce7f8271913a862d1951d806beb852687f3e292e1a83cfda0b448bf71
- SSDEEP 6144:4flfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:4flfAsiVGjSGecvX
- TLSH T11D747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-13_6c945c53fe3265c1fd1b7a30e598b243_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-08-13_6c945c53fe3265c1fd1b7a30e598b243_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- SHA256 0febb474fa7e487c218d124e082ef358d5a27a64c2e3b420a97aadbe2786aea3
- MD5 6c945c53fe3265c1fd1b7a30e598b243
- SHA1 1390531ee0294906ac4b27a4c7a47b57d791ac9b
- SHA512 677dd719b9be632aecc8ea690b6ad94fc55609326f7ff9778b101a6c79920000fe5c1a8ce7f8271913a862d1951d806beb852687f3e292e1a83cfda0b448bf71
- SSDEEP 6144:4flfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:4flfAsiVGjSGecvX
- TLSH T11D747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE