General
- Target 2026-10-16_a9d46694b2c52bca8d76292bb24158e3_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 456KB
- Sample261017-lqtveaec28
- SHA256 5ff055aca81d777e38041aff0534e2299f310a208c16ee118f1337d8e7b4f766
- MD5 a9d46694b2c52bca8d76292bb24158e3
- SHA1 3dbf146ae482b98a52578d8e76a8a4556e2fb139
- SHA512 7706f577ed6fbfebf23c2ace5c6b8a265b4025bf9fa8162fbb9f9af6bba37fada0900b09b72554028d6f2f2ac6c4b251b6c9dbee24e218be656fedd2a8b87622
- SSDEEP 6144:mflfAsiL4lIJjiJcbI03GBc3ucY5DCSjXAflfAsiL4lIW:mflfAsiVGjSGecvXAflfAsii
- TLSH T1ACA48D14BA94F0B2DC95047804EB9B36967EB4281726CBC7F754CE9D9A113C3A9343AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-16_a9d46694b2c52bca8d76292bb24158e3_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-10-16_a9d46694b2c52bca8d76292bb24158e3_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 456KB
- SHA256 5ff055aca81d777e38041aff0534e2299f310a208c16ee118f1337d8e7b4f766
- MD5 a9d46694b2c52bca8d76292bb24158e3
- SHA1 3dbf146ae482b98a52578d8e76a8a4556e2fb139
- SHA512 7706f577ed6fbfebf23c2ace5c6b8a265b4025bf9fa8162fbb9f9af6bba37fada0900b09b72554028d6f2f2ac6c4b251b6c9dbee24e218be656fedd2a8b87622
- SSDEEP 6144:mflfAsiL4lIJjiJcbI03GBc3ucY5DCSjXAflfAsiL4lIW:mflfAsiVGjSGecvXAflfAsii
- TLSH T1ACA48D14BA94F0B2DC95047804EB9B36967EB4281726CBC7F754CE9D9A113C3A9343AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Executes dropped EXE