General
- Target 2026-10-15_1688a08c4f4bce332b4fa955a0dd2fd0_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- Sample261016-2ach7aet8s
- SHA256 e6f66b7e6b4599e4c43c4e0c6be831880434195401026f02e7b36e3eab3b3494
- MD5 1688a08c4f4bce332b4fa955a0dd2fd0
- SHA1 640ddc9e473e7740f22a7817af3c17cc3209f790
- SHA512 30d1362369719a0a91b5f78de62e5bd8adff81c7e16d44ab3c0505293f5e1c1805cea3d381c1e8038ab6cb0fdfbb912ac196dfd6112a02434f8b4b7bcaedb117
- SSDEEP 6144:WflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:WflfAsiVGjSGecvX
- TLSH T189747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-15_1688a08c4f4bce332b4fa955a0dd2fd0_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-10-15_1688a08c4f4bce332b4fa955a0dd2fd0_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- SHA256 e6f66b7e6b4599e4c43c4e0c6be831880434195401026f02e7b36e3eab3b3494
- MD5 1688a08c4f4bce332b4fa955a0dd2fd0
- SHA1 640ddc9e473e7740f22a7817af3c17cc3209f790
- SHA512 30d1362369719a0a91b5f78de62e5bd8adff81c7e16d44ab3c0505293f5e1c1805cea3d381c1e8038ab6cb0fdfbb912ac196dfd6112a02434f8b4b7bcaedb117
- SSDEEP 6144:WflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:WflfAsiVGjSGecvX
- TLSH T189747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE