General
- Target 2026-08-19_d44479aceb2240ccf259efea6144ff8b_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- Sample260819-vy2dwsem3t
- SHA256 393dc685f212701aad3280ad3fe42b61f2193f13ba8c8bc52c57e896c57dadb8
- MD5 d44479aceb2240ccf259efea6144ff8b
- SHA1 0dcfa6106237bf34956539765564b01174dcffba
- SHA512 b4f0b4b306e63017b341710c7ce841d86f531452261d1d3d0cd33956402227280eb08e4195dc421865ae0ec52d3b56bd2ce40dbc71cf72f793755b20110d11dd
- SSDEEP 3072:/flfAsiLHEaML4yrtKOsNi6cWgOEkbaFK:/flfAsiL4lIJ
- TLSH T1FF848C42F5C9D072E84118F0147BDB35467EB8780B396AD7FB921E586E922D1B83836F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-19_d44479aceb2240ccf259efea6144ff8b_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-08-19_d44479aceb2240ccf259efea6144ff8b_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- SHA256 393dc685f212701aad3280ad3fe42b61f2193f13ba8c8bc52c57e896c57dadb8
- MD5 d44479aceb2240ccf259efea6144ff8b
- SHA1 0dcfa6106237bf34956539765564b01174dcffba
- SHA512 b4f0b4b306e63017b341710c7ce841d86f531452261d1d3d0cd33956402227280eb08e4195dc421865ae0ec52d3b56bd2ce40dbc71cf72f793755b20110d11dd
- SSDEEP 3072:/flfAsiLHEaML4yrtKOsNi6cWgOEkbaFK:/flfAsiL4lIJ
- TLSH T1FF848C42F5C9D072E84118F0147BDB35467EB8780B396AD7FB921E586E922D1B83836F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE