General
- Target 2026-09-04_0258fac26ae79536c089bb3c4a8bc71d_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 1.1MB
- Sample260905-ykcedsff83
- SHA256 de3f3a74b4d894a9f322d9d76aa2f6f8aeb60c2a78db21c44a8b6efb6106926b
- MD5 0258fac26ae79536c089bb3c4a8bc71d
- SHA1 25bac4f5c95390eb32962783a81df08e974f1939
- SHA512 d82b3f4ba56495837293f5e438eab125e2e55cfe725c900084fd4976908517b302b202a17596ea6140750c3c03b93589133540a2b74cc46f05c2e4de64cbe985
- SSDEEP 12288:GflfAsiVGjSGecvX6flfAsiVGjSGecvXAflfAsiVGjSGecvX:SMcfWMcfcMcf
- TLSH T1DB357C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_0258fac26ae79536c089bb3c4a8bc71d_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-09-04_0258fac26ae79536c089bb3c4a8bc71d_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 1.1MB
- SHA256 de3f3a74b4d894a9f322d9d76aa2f6f8aeb60c2a78db21c44a8b6efb6106926b
- MD5 0258fac26ae79536c089bb3c4a8bc71d
- SHA1 25bac4f5c95390eb32962783a81df08e974f1939
- SHA512 d82b3f4ba56495837293f5e438eab125e2e55cfe725c900084fd4976908517b302b202a17596ea6140750c3c03b93589133540a2b74cc46f05c2e4de64cbe985
- SSDEEP 12288:GflfAsiVGjSGecvX6flfAsiVGjSGecvXAflfAsiVGjSGecvX:SMcfWMcfcMcf
- TLSH T1DB357C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE