General
- Target 2026-08-14_47bbd1574d4579bfdfd403da7b67a4db_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- Sample260814-3ytytathrh
- SHA256 6baba27f6a1e13c4297e365f4a38652022948ffc7712898d57b429d0786eea67
- MD5 47bbd1574d4579bfdfd403da7b67a4db
- SHA1 055a560428e6314f1a11aa445a0ceaa6fae56f73
- SHA512 00a1912ce9792c8b497d1240d41c48b0a7f910e17d9ff0f5eba5e16a4f51a1e1d5aa8afd899a2f656a7cc7e6b8a48d7ff88de5eb89783f33096c329ba8c60eee
- SSDEEP 3072:6flfAsiLHEaML4yrtKOsNi6cWgOEkbaFK:6flfAsiL4lIJ
- TLSH T12D848C42F5C9D072E84118F0147BDB35467DB8780B396AD7FB921E586E922D1B83836F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-14_47bbd1574d4579bfdfd403da7b67a4db_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-08-14_47bbd1574d4579bfdfd403da7b67a4db_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- SHA256 6baba27f6a1e13c4297e365f4a38652022948ffc7712898d57b429d0786eea67
- MD5 47bbd1574d4579bfdfd403da7b67a4db
- SHA1 055a560428e6314f1a11aa445a0ceaa6fae56f73
- SHA512 00a1912ce9792c8b497d1240d41c48b0a7f910e17d9ff0f5eba5e16a4f51a1e1d5aa8afd899a2f656a7cc7e6b8a48d7ff88de5eb89783f33096c329ba8c60eee
- SSDEEP 3072:6flfAsiLHEaML4yrtKOsNi6cWgOEkbaFK:6flfAsiL4lIJ
- TLSH T12D848C42F5C9D072E84118F0147BDB35467DB8780B396AD7FB921E586E922D1B83836F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE