General
- Target 2026-10-06_6e924f5ee431cd0b5341d9e27e7a93bd_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 456KB
- Sample261006-pradyay1et
- SHA256 ba45d38ea0afed991b3ab843dbea8af935c9b185617423a402a1665b0d43d392
- MD5 6e924f5ee431cd0b5341d9e27e7a93bd
- SHA1 481715d8c4d97b8a6df951609930d0eb5f188198
- SHA512 b846f682bf88decf42aa9aa49b202f38abee8654940ae3d2bc73937579e8b0ca7436c34f1d280ee4f130ae9ec2bac8409620e4bea9ef93192ed4e9894a221566
- SSDEEP 6144:TflfAsiL4lIJjiJcbI03GBc3ucY5DCSjXAflfAsiL4lI5:TflfAsiVGjSGecvXAflfAsit
- TLSH T126A48D14BA94F0B2DC95047804EB9B36967EB4281726CBC7F754CE9D9A113C3A9343AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-06_6e924f5ee431cd0b5341d9e27e7a93bd_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-10-06_6e924f5ee431cd0b5341d9e27e7a93bd_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 456KB
- SHA256 ba45d38ea0afed991b3ab843dbea8af935c9b185617423a402a1665b0d43d392
- MD5 6e924f5ee431cd0b5341d9e27e7a93bd
- SHA1 481715d8c4d97b8a6df951609930d0eb5f188198
- SHA512 b846f682bf88decf42aa9aa49b202f38abee8654940ae3d2bc73937579e8b0ca7436c34f1d280ee4f130ae9ec2bac8409620e4bea9ef93192ed4e9894a221566
- SSDEEP 6144:TflfAsiL4lIJjiJcbI03GBc3ucY5DCSjXAflfAsiL4lI5:TflfAsiVGjSGecvXAflfAsit
- TLSH T126A48D14BA94F0B2DC95047804EB9B36967EB4281726CBC7F754CE9D9A113C3A9343AF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE