General
- Target 2026-08-14_78bc8605a834f570216e7af4bab12b5c_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- Sample260814-1afeeasarg
- SHA256 4fe9c35c49ca4340d9551ff061c354fe072b5a6ef39de8fabfe213a1cb7d2bfa
- MD5 78bc8605a834f570216e7af4bab12b5c
- SHA1 355323a9020853e92acb8d4e5411da05ee43a6d7
- SHA512 73e481d13fdc30b2e23a346b5b8b7456b498acea69a47aa00c5813d5dbf05a6d5540482421611681bf67d90703b37a4a156859ec909107e8007c3aa45e7421c8
- SSDEEP 6144:VflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:VflfAsiVGjSGecvX
- TLSH T1E1747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-14_78bc8605a834f570216e7af4bab12b5c_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-08-14_78bc8605a834f570216e7af4bab12b5c_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- SHA256 4fe9c35c49ca4340d9551ff061c354fe072b5a6ef39de8fabfe213a1cb7d2bfa
- MD5 78bc8605a834f570216e7af4bab12b5c
- SHA1 355323a9020853e92acb8d4e5411da05ee43a6d7
- SHA512 73e481d13fdc30b2e23a346b5b8b7456b498acea69a47aa00c5813d5dbf05a6d5540482421611681bf67d90703b37a4a156859ec909107e8007c3aa45e7421c8
- SSDEEP 6144:VflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:VflfAsiVGjSGecvX
- TLSH T1E1747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE