General
- Target 2026-10-16_ee96ecb955a422add1c7b05dfa1d4ccb_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 456KB
- Sample261017-dshk6ach47
- SHA256 14012c96aa655e8592a8abf503751bda450cc324c5d6a7262fd56cd077b6f105
- MD5 ee96ecb955a422add1c7b05dfa1d4ccb
- SHA1 50fbe89022276a5f8342f06d53b00d02b03105fb
- SHA512 356fbb7809716347aabcf8b0c6c0e100ce939542fd0c59fd3c5efdd81adb25b0d7c9af1a7322429ede70e0d59233bfc9873408e8653982ebedcc526d9b2cf9ea
- SSDEEP 6144:cflfAsiL4lIJjiJcbI03GBc3ucY5DCSjXAflfAsiL4lIw:cflfAsiVGjSGecvXAflfAsiU
- TLSH T1C1A48D14BA94F0B2DC95047804EB9B36967EB4281726CBC7F754CE9D9A113C3A9343AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-16_ee96ecb955a422add1c7b05dfa1d4ccb_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-10-16_ee96ecb955a422add1c7b05dfa1d4ccb_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 456KB
- SHA256 14012c96aa655e8592a8abf503751bda450cc324c5d6a7262fd56cd077b6f105
- MD5 ee96ecb955a422add1c7b05dfa1d4ccb
- SHA1 50fbe89022276a5f8342f06d53b00d02b03105fb
- SHA512 356fbb7809716347aabcf8b0c6c0e100ce939542fd0c59fd3c5efdd81adb25b0d7c9af1a7322429ede70e0d59233bfc9873408e8653982ebedcc526d9b2cf9ea
- SSDEEP 6144:cflfAsiL4lIJjiJcbI03GBc3ucY5DCSjXAflfAsiL4lIw:cflfAsiVGjSGecvXAflfAsiU
- TLSH T1C1A48D14BA94F0B2DC95047804EB9B36967EB4281726CBC7F754CE9D9A113C3A9343AF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE