General
- Target 2026-08-19_3644bae55c806cf06f4a7780608e15aa_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- Sample260819-cevg5awyet
- SHA256 ba99ecf145b37a8f3e09cbba0984092486b0a17df7020ad3bb8c388447404d07
- MD5 3644bae55c806cf06f4a7780608e15aa
- SHA1 e0922f51968228b673ba9007242cd3463579de61
- SHA512 ff48c99caf145d74ed2177779aff7791669ad30cda7514f50c5ffbe0ab9528037cc36aa82ef10aa0c2035b401116777d9e2b7e35591ef2e90b1c5fb5cb80398e
- SSDEEP 6144:dflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:dflfAsiVGjSGecvX
- TLSH T1D7747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-19_3644bae55c806cf06f4a7780608e15aa_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-08-19_3644bae55c806cf06f4a7780608e15aa_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- SHA256 ba99ecf145b37a8f3e09cbba0984092486b0a17df7020ad3bb8c388447404d07
- MD5 3644bae55c806cf06f4a7780608e15aa
- SHA1 e0922f51968228b673ba9007242cd3463579de61
- SHA512 ff48c99caf145d74ed2177779aff7791669ad30cda7514f50c5ffbe0ab9528037cc36aa82ef10aa0c2035b401116777d9e2b7e35591ef2e90b1c5fb5cb80398e
- SSDEEP 6144:dflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:dflfAsiVGjSGecvX
- TLSH T1D7747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE