General
- Target 2026-09-07_c65962c8ec6c82a96d50bfb8fdb02a07_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- Sample260908-g1cxesdd92
- SHA256 a8e50b6616aa1ebb339c682e65a47cdbdaa95cadd4776bb3d11601b810091167
- MD5 c65962c8ec6c82a96d50bfb8fdb02a07
- SHA1 2795dd1a621f9a06c417e430afb9395619595fc5
- SHA512 74a31ca0759da5e8d93c90073cd9bbb53a1b369fcc56be5412fc1f457c2f274cda11cfad990e6ef1b185fa3c74c9c5a1d67bc882e47bf720272ec03ab3c7bd77
- SSDEEP 6144:LflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:LflfAsiVGjSGecvX
- TLSH T1E0747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-07_c65962c8ec6c82a96d50bfb8fdb02a07_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-09-07_c65962c8ec6c82a96d50bfb8fdb02a07_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- SHA256 a8e50b6616aa1ebb339c682e65a47cdbdaa95cadd4776bb3d11601b810091167
- MD5 c65962c8ec6c82a96d50bfb8fdb02a07
- SHA1 2795dd1a621f9a06c417e430afb9395619595fc5
- SHA512 74a31ca0759da5e8d93c90073cd9bbb53a1b369fcc56be5412fc1f457c2f274cda11cfad990e6ef1b185fa3c74c9c5a1d67bc882e47bf720272ec03ab3c7bd77
- SSDEEP 6144:LflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:LflfAsiVGjSGecvX
- TLSH T1E0747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE