General
- Target 2026-08-15_76520f5a87db9f92027e29e78668bd58_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- Sample260815-taepjszamd
- SHA256 3e3396033a795ff2c6167938ee81954d81ba1180df7827876e7e3ab1e2884511
- MD5 76520f5a87db9f92027e29e78668bd58
- SHA1 284d56cf2cb96e2268e5542dacb7e3e2b8844683
- SHA512 f06177016f1c1c85b90f4eefe1903197f2996999a742b5609c300d5fa8f182e3134d33585fb046f58d3b9603983016d3ec90c547a4d722bbd5040302eb3e536c
- SSDEEP 6144:nflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:nflfAsiVGjSGecvX
- TLSH T1EA747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-15_76520f5a87db9f92027e29e78668bd58_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-08-15_76520f5a87db9f92027e29e78668bd58_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- SHA256 3e3396033a795ff2c6167938ee81954d81ba1180df7827876e7e3ab1e2884511
- MD5 76520f5a87db9f92027e29e78668bd58
- SHA1 284d56cf2cb96e2268e5542dacb7e3e2b8844683
- SHA512 f06177016f1c1c85b90f4eefe1903197f2996999a742b5609c300d5fa8f182e3134d33585fb046f58d3b9603983016d3ec90c547a4d722bbd5040302eb3e536c
- SSDEEP 6144:nflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:nflfAsiVGjSGecvX
- TLSH T1EA747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE