General
- Target 2026-10-02_844a802a969221eea7a0ae236e225667_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 456KB
- Sample261003-ks7nlsvcnd
- SHA256 d2ed268e5b9f0bedb10346fdc5d6a01b85151413f585aeeeb3e4c81c2cae6cd1
- MD5 844a802a969221eea7a0ae236e225667
- SHA1 5c59762ae370a6f651f1e6c30d5bf77f4997d920
- SHA512 6b42dcfb920cc3fd4accc1cd64d7252c414efc5f3e9559183926cbf6d7c99e152380dfb706f0f55c4ba8f2cbc794f40fe7d94cabf308cb5b4d54562d028b7d0f
- SSDEEP 6144:uflfAsiL4lIJjiJcbI03GBc3ucY5DCSjXAflfAsiL4lIG:uflfAsiVGjSGecvXAflfAsiK
- TLSH T192A48D14BA94F0B2DC95047804EB9B36967EB4281726CBC7F754CE9D9A113C3A9343AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-02_844a802a969221eea7a0ae236e225667_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-10-02_844a802a969221eea7a0ae236e225667_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 456KB
- SHA256 d2ed268e5b9f0bedb10346fdc5d6a01b85151413f585aeeeb3e4c81c2cae6cd1
- MD5 844a802a969221eea7a0ae236e225667
- SHA1 5c59762ae370a6f651f1e6c30d5bf77f4997d920
- SHA512 6b42dcfb920cc3fd4accc1cd64d7252c414efc5f3e9559183926cbf6d7c99e152380dfb706f0f55c4ba8f2cbc794f40fe7d94cabf308cb5b4d54562d028b7d0f
- SSDEEP 6144:uflfAsiL4lIJjiJcbI03GBc3ucY5DCSjXAflfAsiL4lIG:uflfAsiVGjSGecvXAflfAsiK
- TLSH T192A48D14BA94F0B2DC95047804EB9B36967EB4281726CBC7F754CE9D9A113C3A9343AF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE