General
- Target 2026-08-15_4f4e1a7315d667033f2ece28267ed64c_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- Sample260815-plsckafh63
- SHA256 5a26590b4f27b2a19cec097e03355c7198931f2cef65ecf3a66798b9f04e944e
- MD5 4f4e1a7315d667033f2ece28267ed64c
- SHA1 c1be82d9acf30678abc98d3b3e28097596ac99a3
- SHA512 eb89c9440f04f0eb3d72b0493c1b34f53ff0ff925aad99a2b1bf2b6a3bdb986d76b7c29d01e855c16e056aa12a584b27083e23864bb01d868760f9ac205fe277
- SSDEEP 6144:9flfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:9flfAsiVGjSGecvX
- TLSH T10C747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-15_4f4e1a7315d667033f2ece28267ed64c_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-08-15_4f4e1a7315d667033f2ece28267ed64c_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- SHA256 5a26590b4f27b2a19cec097e03355c7198931f2cef65ecf3a66798b9f04e944e
- MD5 4f4e1a7315d667033f2ece28267ed64c
- SHA1 c1be82d9acf30678abc98d3b3e28097596ac99a3
- SHA512 eb89c9440f04f0eb3d72b0493c1b34f53ff0ff925aad99a2b1bf2b6a3bdb986d76b7c29d01e855c16e056aa12a584b27083e23864bb01d868760f9ac205fe277
- SSDEEP 6144:9flfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:9flfAsiVGjSGecvX
- TLSH T10C747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE