General
- Target 2026-09-12_6075bf0873d43761d799cf990f0da5f4_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- Sample260913-a82r7ada47
- SHA256 f6e1b941fd448dc22bd2f46bb93b34d2cfa8654226493ca038051512fcefcf83
- MD5 6075bf0873d43761d799cf990f0da5f4
- SHA1 7755ca805b747693586a7b30d1ee858c96e26055
- SHA512 baf9a9cb02706686ebdf0e7919e9826f7cdb91efe845974e592804315f60fb83907c39082bfb5d5d099091f7f836d1b16fb7467de81f5aefcfe509e58428e6c3
- SSDEEP 6144:2flfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:2flfAsiVGjSGecvX
- TLSH T191747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-12_6075bf0873d43761d799cf990f0da5f4_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-09-12_6075bf0873d43761d799cf990f0da5f4_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- SHA256 f6e1b941fd448dc22bd2f46bb93b34d2cfa8654226493ca038051512fcefcf83
- MD5 6075bf0873d43761d799cf990f0da5f4
- SHA1 7755ca805b747693586a7b30d1ee858c96e26055
- SHA512 baf9a9cb02706686ebdf0e7919e9826f7cdb91efe845974e592804315f60fb83907c39082bfb5d5d099091f7f836d1b16fb7467de81f5aefcfe509e58428e6c3
- SSDEEP 6144:2flfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:2flfAsiVGjSGecvX
- TLSH T191747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE