General
- Target 2026-08-14_8406ae06b6cde0726c79abe76dbaf58e_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- Sample260814-jb6jjsxfpg
- SHA256 669b356e11ca8f9991aa233fe58b010ecf7e128ff99bc18e57f7128672593998
- MD5 8406ae06b6cde0726c79abe76dbaf58e
- SHA1 5f79512fbd511c921822e168f4e2b271e5bb7e4b
- SHA512 696be749841e1dccffab06728eaff476e7ec3d146c286e83dd72ac8d9bcc3851c9a5a9bf4802036c9d8b9778b2e179d86e3975e23eea2d3b8d10c2d7d312ad3b
- SSDEEP 3072:3flfAsiLHEaML4yrtKOsNi6cWgOEkbaFK:3flfAsiL4lIJ
- TLSH T149848C42F5C9D072E84118F0147BDB35467DB8780B356AD7FB921E586E922D1B83836F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-14_8406ae06b6cde0726c79abe76dbaf58e_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-08-14_8406ae06b6cde0726c79abe76dbaf58e_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- SHA256 669b356e11ca8f9991aa233fe58b010ecf7e128ff99bc18e57f7128672593998
- MD5 8406ae06b6cde0726c79abe76dbaf58e
- SHA1 5f79512fbd511c921822e168f4e2b271e5bb7e4b
- SHA512 696be749841e1dccffab06728eaff476e7ec3d146c286e83dd72ac8d9bcc3851c9a5a9bf4802036c9d8b9778b2e179d86e3975e23eea2d3b8d10c2d7d312ad3b
- SSDEEP 3072:3flfAsiLHEaML4yrtKOsNi6cWgOEkbaFK:3flfAsiL4lIJ
- TLSH T149848C42F5C9D072E84118F0147BDB35467DB8780B356AD7FB921E586E922D1B83836F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE