General
- Target 2026-08-20_3cbcb6e5590c679c19e4321ce1629f07_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- Sample260820-s4xa1seq71
- SHA256 988f474d2fd325fb886e0ef89315ca83d5d0991ffdff0c5a0352f504b9e9943c
- MD5 3cbcb6e5590c679c19e4321ce1629f07
- SHA1 f6865f5870bd908a072823a549c1edaa1f85c70e
- SHA512 fb8d341c8a8656f8037b5279b69156e93a7af304bf0b377f29240f767b4e6162ee5637c64f661e46b30699674de0a8e9249645b15eb647556206d9bdd2aa21f6
- SSDEEP 6144:fflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:fflfAsiVGjSGecvX
- TLSH T1F7747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-20_3cbcb6e5590c679c19e4321ce1629f07_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-08-20_3cbcb6e5590c679c19e4321ce1629f07_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- SHA256 988f474d2fd325fb886e0ef89315ca83d5d0991ffdff0c5a0352f504b9e9943c
- MD5 3cbcb6e5590c679c19e4321ce1629f07
- SHA1 f6865f5870bd908a072823a549c1edaa1f85c70e
- SHA512 fb8d341c8a8656f8037b5279b69156e93a7af304bf0b377f29240f767b4e6162ee5637c64f661e46b30699674de0a8e9249645b15eb647556206d9bdd2aa21f6
- SSDEEP 6144:fflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:fflfAsiVGjSGecvX
- TLSH T1F7747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE