General
- Target 2026-08-18_d9073816a8158b7512e6db2d1b01775c_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- Sample260818-rtmhdstfje
- SHA256 7c556b93903aa76509b36e9b43a16b86cc73e1239a1fa5982fa78cdf877604e6
- MD5 d9073816a8158b7512e6db2d1b01775c
- SHA1 6b0cf292cd1c6d769338800266fabc70663ed810
- SHA512 d8e537a6c32b06428571bde03eab1f7d4328f8a6fad393b5553fabb1707dda1baf23892157f61163af1c247edcd06e70e674c2e25c0f375bc527a14d7c1250bb
- SSDEEP 3072:jflfAsiLHEaML4yrtKOsNi6cWgOEkbaFK:jflfAsiL4lIJ
- TLSH T1D5748C42F5C9D072E84118F0147BDB35467DB8780B356AD7FB921E586E922D1B83836F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-18_d9073816a8158b7512e6db2d1b01775c_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-08-18_d9073816a8158b7512e6db2d1b01775c_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- SHA256 7c556b93903aa76509b36e9b43a16b86cc73e1239a1fa5982fa78cdf877604e6
- MD5 d9073816a8158b7512e6db2d1b01775c
- SHA1 6b0cf292cd1c6d769338800266fabc70663ed810
- SHA512 d8e537a6c32b06428571bde03eab1f7d4328f8a6fad393b5553fabb1707dda1baf23892157f61163af1c247edcd06e70e674c2e25c0f375bc527a14d7c1250bb
- SSDEEP 3072:jflfAsiLHEaML4yrtKOsNi6cWgOEkbaFK:jflfAsiL4lIJ
- TLSH T1D5748C42F5C9D072E84118F0147BDB35467DB8780B356AD7FB921E586E922D1B83836F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE