General
- Target 2026-08-20_dae29f5ac14f182230d1977362ccfd7a_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- Sample260820-z2vsqsap7w
- SHA256 57a7c730d83913de1aded3f7594d7b3bebb301664cc9acfd417c8c6db1ad95e4
- MD5 dae29f5ac14f182230d1977362ccfd7a
- SHA1 0cfe74abea6fbeaa33c8c414a93b72589ee4111c
- SHA512 6188ef97836b96f39ec997cb457e096aff0e9257da0fd4f886d1d9019f4b479c9ba93ac0a2d191afb1f6ea60791709cdf19835ed23c9d226e0cf192e7e6df402
- SSDEEP 6144:TflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:TflfAsiVGjSGecvX
- TLSH T15D747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-20_dae29f5ac14f182230d1977362ccfd7a_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-08-20_dae29f5ac14f182230d1977362ccfd7a_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- SHA256 57a7c730d83913de1aded3f7594d7b3bebb301664cc9acfd417c8c6db1ad95e4
- MD5 dae29f5ac14f182230d1977362ccfd7a
- SHA1 0cfe74abea6fbeaa33c8c414a93b72589ee4111c
- SHA512 6188ef97836b96f39ec997cb457e096aff0e9257da0fd4f886d1d9019f4b479c9ba93ac0a2d191afb1f6ea60791709cdf19835ed23c9d226e0cf192e7e6df402
- SSDEEP 6144:TflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:TflfAsiVGjSGecvX
- TLSH T15D747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE