General
- Target 2026-08-28_9bff0bdb0a6d9223ece06207abb5e45e_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- Sample260828-nf634acf58
- SHA256 b3b2c7a63ac5fba7187762e9c21ab9f359c96c6a301a46ae763156668014e893
- MD5 9bff0bdb0a6d9223ece06207abb5e45e
- SHA1 e120f55bc109a09199a79521137aff46649a7d3f
- SHA512 cf72bfc52393efdba673858b8ff8ee5606bbaa49d396cb3e7452b6254070440526ad465bd327112b986d3f2f4714e4f480de6b79bd203aa2b9f0f1e608f1bd03
- SSDEEP 3072:EflfAsiLHEaML4yrtKOsNi6cWgOEkbaFK:EflfAsiL4lIJ
- TLSH T1C7748C42F5C9D072E84118F0147BDB35467DB8780B396AD7FB921E686E922D1B83836F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-28_9bff0bdb0a6d9223ece06207abb5e45e_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-08-28_9bff0bdb0a6d9223ece06207abb5e45e_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- SHA256 b3b2c7a63ac5fba7187762e9c21ab9f359c96c6a301a46ae763156668014e893
- MD5 9bff0bdb0a6d9223ece06207abb5e45e
- SHA1 e120f55bc109a09199a79521137aff46649a7d3f
- SHA512 cf72bfc52393efdba673858b8ff8ee5606bbaa49d396cb3e7452b6254070440526ad465bd327112b986d3f2f4714e4f480de6b79bd203aa2b9f0f1e608f1bd03
- SSDEEP 3072:EflfAsiLHEaML4yrtKOsNi6cWgOEkbaFK:EflfAsiL4lIJ
- TLSH T1C7748C42F5C9D072E84118F0147BDB35467DB8780B396AD7FB921E686E922D1B83836F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE