General
- Target 2026-08-14_5031e118a318efd4793949dd72620f07_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- Sample260814-e4bgnafc27
- SHA256 58e4b9a10c7ea61bb0c6f333e758cb7589f383c694bed01432cceb2c13f9b11e
- MD5 5031e118a318efd4793949dd72620f07
- SHA1 cc49dc189231a519f6fce3fb1f2676bbeba228ab
- SHA512 78c4f3db1dcf8f04e5f3acae2c5256180edc6afbfb2ed5e5383e62b60d47c9d9a0fdaedc7e7658376ebac4861bd36d09461e42238eadb1a0f3535d28c9d98091
- SSDEEP 6144:wflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:wflfAsiVGjSGecvX
- TLSH T1E4747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-14_5031e118a318efd4793949dd72620f07_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-08-14_5031e118a318efd4793949dd72620f07_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- SHA256 58e4b9a10c7ea61bb0c6f333e758cb7589f383c694bed01432cceb2c13f9b11e
- MD5 5031e118a318efd4793949dd72620f07
- SHA1 cc49dc189231a519f6fce3fb1f2676bbeba228ab
- SHA512 78c4f3db1dcf8f04e5f3acae2c5256180edc6afbfb2ed5e5383e62b60d47c9d9a0fdaedc7e7658376ebac4861bd36d09461e42238eadb1a0f3535d28c9d98091
- SSDEEP 6144:wflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:wflfAsiVGjSGecvX
- TLSH T1E4747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE