General
- Target 2026-08-19_cef19b02b082eeb537bdabbbe16d33ee_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- Sample260819-v3jdwage56
- SHA256 224f4637f34de53aefce1bc165458924c1454c91922709050ad293da9a645c6d
- MD5 cef19b02b082eeb537bdabbbe16d33ee
- SHA1 b79d598d75c8882cb1daf86182d6bc7514d5d7af
- SHA512 6b77d124f38c1ddc9ae53457259b8bb0b36527b824ae7670ff465c95e0452b7af4e363bfe20946a4abce11f530b0d3636793f80b9934a12eec98c4b98fc146ed
- SSDEEP 6144:BflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:BflfAsiVGjSGecvX
- TLSH T1DE747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-19_cef19b02b082eeb537bdabbbe16d33ee_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-08-19_cef19b02b082eeb537bdabbbe16d33ee_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- SHA256 224f4637f34de53aefce1bc165458924c1454c91922709050ad293da9a645c6d
- MD5 cef19b02b082eeb537bdabbbe16d33ee
- SHA1 b79d598d75c8882cb1daf86182d6bc7514d5d7af
- SHA512 6b77d124f38c1ddc9ae53457259b8bb0b36527b824ae7670ff465c95e0452b7af4e363bfe20946a4abce11f530b0d3636793f80b9934a12eec98c4b98fc146ed
- SSDEEP 6144:BflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:BflfAsiVGjSGecvX
- TLSH T1DE747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE