General
- Target 2026-08-20_8b555fc8ab2b505f45b037c1a8688453_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- Sample260820-sg8qjazclb
- SHA256 180d61774cadd4c32ad0b136c796421d4928dda22db3224bdfeffccec7987dbd
- MD5 8b555fc8ab2b505f45b037c1a8688453
- SHA1 5b2a47451a02963c84501ec1c9665b156130574c
- SHA512 03c10b423283b5d3ef98af813e8781322bf6e2a8037ec1bbda190dde3fad561c0d8707b595999a4e5901c3dad877463f6159ffacaa996c21205f90ecff3a96e2
- SSDEEP 3072:rflfAsiLHEaML4yrtKOsNi6cWgOEkbaFK:rflfAsiL4lIJ
- TLSH T13F748C42F5C9D072E84118F0146BDB35467EB8780B396AD7FB921E586E922D1B83836F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-20_8b555fc8ab2b505f45b037c1a8688453_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-08-20_8b555fc8ab2b505f45b037c1a8688453_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- SHA256 180d61774cadd4c32ad0b136c796421d4928dda22db3224bdfeffccec7987dbd
- MD5 8b555fc8ab2b505f45b037c1a8688453
- SHA1 5b2a47451a02963c84501ec1c9665b156130574c
- SHA512 03c10b423283b5d3ef98af813e8781322bf6e2a8037ec1bbda190dde3fad561c0d8707b595999a4e5901c3dad877463f6159ffacaa996c21205f90ecff3a96e2
- SSDEEP 3072:rflfAsiLHEaML4yrtKOsNi6cWgOEkbaFK:rflfAsiL4lIJ
- TLSH T13F748C42F5C9D072E84118F0146BDB35467EB8780B396AD7FB921E586E922D1B83836F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE