General
- Target 2026-10-16_954a8430862f452956ec23849354445a_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 456KB
- Sample261017-nse55set7k
- SHA256 8ed5a40a50229fab790799ba178edf797a7b3eff247a071c80404f68f0ab8fef
- MD5 954a8430862f452956ec23849354445a
- SHA1 56d98f1e12049d1aebdd41b922c4dd0f58ec40f4
- SHA512 334077cafe7f2cbf945538d851ae2a68258a75458c25e8ba88c2a2812cda4baad6724dc9f0436cbefdcf235a3dcbe50c6edab63846f61e789f293ca58356603f
- SSDEEP 6144:nflfAsiL4lIJjiJcbI03GBc3ucY5DCSjXAflfAsiL4lIl:nflfAsiVGjSGecvXAflfAsiZ
- TLSH T15BA48D14BA94F0B2DC95047804EB9B36967EB4281726CBC7F754CE9D9A113C3A9343AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-16_954a8430862f452956ec23849354445a_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-10-16_954a8430862f452956ec23849354445a_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 456KB
- SHA256 8ed5a40a50229fab790799ba178edf797a7b3eff247a071c80404f68f0ab8fef
- MD5 954a8430862f452956ec23849354445a
- SHA1 56d98f1e12049d1aebdd41b922c4dd0f58ec40f4
- SHA512 334077cafe7f2cbf945538d851ae2a68258a75458c25e8ba88c2a2812cda4baad6724dc9f0436cbefdcf235a3dcbe50c6edab63846f61e789f293ca58356603f
- SSDEEP 6144:nflfAsiL4lIJjiJcbI03GBc3ucY5DCSjXAflfAsiL4lIl:nflfAsiVGjSGecvXAflfAsiZ
- TLSH T15BA48D14BA94F0B2DC95047804EB9B36967EB4281726CBC7F754CE9D9A113C3A9343AF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE