General
- Target 2026-10-22_e371e2a5d71d6c30a5c41b5c6c93be4e_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- Sample261023-tj656adb87
- SHA256 d1fad905fab11291e08f2dcb20381c19a94655f15e671018f545162e6d54f92b
- MD5 e371e2a5d71d6c30a5c41b5c6c93be4e
- SHA1 7f042d2b7e41462b356a2b94bfacdbec7b49c41f
- SHA512 483c9dd1825716e85e89ba9e8c5b97642166c44f88356ab8c743297ec17d1ac87d143758f18b9de5862a13a3eff7970b73d8659eac9a5fff6d6f863faa4aaf12
- SSDEEP 6144:oflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:oflfAsiVGjSGecvX
- TLSH T128747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-22_e371e2a5d71d6c30a5c41b5c6c93be4e_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-10-22_e371e2a5d71d6c30a5c41b5c6c93be4e_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- SHA256 d1fad905fab11291e08f2dcb20381c19a94655f15e671018f545162e6d54f92b
- MD5 e371e2a5d71d6c30a5c41b5c6c93be4e
- SHA1 7f042d2b7e41462b356a2b94bfacdbec7b49c41f
- SHA512 483c9dd1825716e85e89ba9e8c5b97642166c44f88356ab8c743297ec17d1ac87d143758f18b9de5862a13a3eff7970b73d8659eac9a5fff6d6f863faa4aaf12
- SSDEEP 6144:oflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:oflfAsiVGjSGecvX
- TLSH T128747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE