General
- Target 2026-10-26_47b121c2532b9f2dc9d892c26dd6d7d5_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- Sample261026-eec9ysds5p
- SHA256 a67bae26494183613a3867810ba05ce57efd34d63a19f4df964296b23b74e0ab
- MD5 47b121c2532b9f2dc9d892c26dd6d7d5
- SHA1 38f99f4cec8b29f90af1d17e1dea767f28d16106
- SHA512 b41bb35c886f75814cb8a78c8df52f1b7f8b3e6f2343bd20b666fad8391159a2998997494dc190b9e92c71996dc59379f6064c327fc165d961e9fff34eb7ece3
- SSDEEP 6144:dflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:dflfAsiVGjSGecvX
- TLSH T137747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-26_47b121c2532b9f2dc9d892c26dd6d7d5_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-10-26_47b121c2532b9f2dc9d892c26dd6d7d5_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- SHA256 a67bae26494183613a3867810ba05ce57efd34d63a19f4df964296b23b74e0ab
- MD5 47b121c2532b9f2dc9d892c26dd6d7d5
- SHA1 38f99f4cec8b29f90af1d17e1dea767f28d16106
- SHA512 b41bb35c886f75814cb8a78c8df52f1b7f8b3e6f2343bd20b666fad8391159a2998997494dc190b9e92c71996dc59379f6064c327fc165d961e9fff34eb7ece3
- SSDEEP 6144:dflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:dflfAsiVGjSGecvX
- TLSH T137747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE