General
- Target 2026-08-15_fa051c65fbdcb9807f6ea09fdb78422c_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- Sample260815-kl32vasenc
- SHA256 4143d589470464fc86c0469c0cbce7f051aa4d7eb6fa9de1f09998dd09e2a09a
- MD5 fa051c65fbdcb9807f6ea09fdb78422c
- SHA1 c70f61ef11a5e4ae662f7cc00aca04a5ba6e93bd
- SHA512 c63e255091e47169a46141be36ade46a1f292e8e970f732d57c310ec909e80cbb0ecf7b94ba0515094b538f6503620c726ef46edeaad5b3efc5e545fe20f304c
- SSDEEP 6144:1flfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:1flfAsiVGjSGecvX
- TLSH T1E4747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-15_fa051c65fbdcb9807f6ea09fdb78422c_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-08-15_fa051c65fbdcb9807f6ea09fdb78422c_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- SHA256 4143d589470464fc86c0469c0cbce7f051aa4d7eb6fa9de1f09998dd09e2a09a
- MD5 fa051c65fbdcb9807f6ea09fdb78422c
- SHA1 c70f61ef11a5e4ae662f7cc00aca04a5ba6e93bd
- SHA512 c63e255091e47169a46141be36ade46a1f292e8e970f732d57c310ec909e80cbb0ecf7b94ba0515094b538f6503620c726ef46edeaad5b3efc5e545fe20f304c
- SSDEEP 6144:1flfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:1flfAsiVGjSGecvX
- TLSH T1E4747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE