General
- Target 2026-08-21_39c28866b99fd5d6541596b9fa817ef3_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- Sample260821-xpk2nabk4t
- SHA256 bd3f10e1f7bdc0c950ae2313686e49cbb8b944e61c95cbe750fbb2aa1541299e
- MD5 39c28866b99fd5d6541596b9fa817ef3
- SHA1 ac45879293245c22cbd70808c68bb9d06719d17f
- SHA512 2b43a6ad9f51d5015f34ecf9272820cc746ae7647cc0b273a94e6a4062adf370a647ac27673c3406c1eaae13f288bbe4cba832644559784312f17b7b04e7279b
- SSDEEP 6144:4flfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:4flfAsiVGjSGecvX
- TLSH T142747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-21_39c28866b99fd5d6541596b9fa817ef3_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-08-21_39c28866b99fd5d6541596b9fa817ef3_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- SHA256 bd3f10e1f7bdc0c950ae2313686e49cbb8b944e61c95cbe750fbb2aa1541299e
- MD5 39c28866b99fd5d6541596b9fa817ef3
- SHA1 ac45879293245c22cbd70808c68bb9d06719d17f
- SHA512 2b43a6ad9f51d5015f34ecf9272820cc746ae7647cc0b273a94e6a4062adf370a647ac27673c3406c1eaae13f288bbe4cba832644559784312f17b7b04e7279b
- SSDEEP 6144:4flfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:4flfAsiVGjSGecvX
- TLSH T142747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE