General
- Target 2026-10-25_ff94b8a5e5ebacd8342dc1d1c51612cf_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- Sample261026-e5b5kszy9q
- SHA256 471ba059bdcede670bb875daf2e445be84e4a5d9d9be41bd818a25007417d9f6
- MD5 ff94b8a5e5ebacd8342dc1d1c51612cf
- SHA1 152f6507dd68a6d32e55274dec11aa64b5414179
- SHA512 08bc74c0c9361fb05953aed5906b0e3e6b5a230cbe0c6febc8115826d96e10c740ca2994223423040461c50f6f1f1e8230e831a18801e6a56baa2cc99abc3d9e
- SSDEEP 6144:UflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:UflfAsiVGjSGecvX
- TLSH T15E747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-25_ff94b8a5e5ebacd8342dc1d1c51612cf_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-10-25_ff94b8a5e5ebacd8342dc1d1c51612cf_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- SHA256 471ba059bdcede670bb875daf2e445be84e4a5d9d9be41bd818a25007417d9f6
- MD5 ff94b8a5e5ebacd8342dc1d1c51612cf
- SHA1 152f6507dd68a6d32e55274dec11aa64b5414179
- SHA512 08bc74c0c9361fb05953aed5906b0e3e6b5a230cbe0c6febc8115826d96e10c740ca2994223423040461c50f6f1f1e8230e831a18801e6a56baa2cc99abc3d9e
- SSDEEP 6144:UflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:UflfAsiVGjSGecvX
- TLSH T15E747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE