General
- Target 2026-10-13_d91e46d7e684a410280a35ae15ba9e3a_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- Sample261014-e4gzfayvbt
- SHA256 54bc071560f221420028869e5502cee62b1d411cbfa10089758bf756ae20580c
- MD5 d91e46d7e684a410280a35ae15ba9e3a
- SHA1 ec079d4b5ba11076043ca3753ad2e98677736396
- SHA512 87dd51d28df1ed946e304eb8c5a71dd5ed993f3034b3a5edeb52f43c9ae640c82d24dfd800cf58ca4a3c4ddc44baa9464a5a00d4c0a9419f4d0a7bcd2f44d2cb
- SSDEEP 6144:CflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:CflfAsiVGjSGecvX
- TLSH T1CB747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-13_d91e46d7e684a410280a35ae15ba9e3a_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-10-13_d91e46d7e684a410280a35ae15ba9e3a_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- SHA256 54bc071560f221420028869e5502cee62b1d411cbfa10089758bf756ae20580c
- MD5 d91e46d7e684a410280a35ae15ba9e3a
- SHA1 ec079d4b5ba11076043ca3753ad2e98677736396
- SHA512 87dd51d28df1ed946e304eb8c5a71dd5ed993f3034b3a5edeb52f43c9ae640c82d24dfd800cf58ca4a3c4ddc44baa9464a5a00d4c0a9419f4d0a7bcd2f44d2cb
- SSDEEP 6144:CflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:CflfAsiVGjSGecvX
- TLSH T1CB747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE