General
- Target 2026-10-25_d1bfb5f7d85aa65365d223dcd4b33ed6_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- Sample261026-nhs91sdv9y
- SHA256 ad8152c4d752728b3ac89fa2c3b49a22556d072ac5142f8bf96565e287779ff4
- MD5 d1bfb5f7d85aa65365d223dcd4b33ed6
- SHA1 690d364e47f00e670053f110c9744c81137fc414
- SHA512 3e8a5a1c2ddae61ba0893d3789cdd10cc92716e3019fcf32009de6b72cda0a4d4f980ed7382f169b71972141ce79db8422127d545b3d18465316e842575756a0
- SSDEEP 6144:QflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:QflfAsiVGjSGecvX
- TLSH T12E747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-25_d1bfb5f7d85aa65365d223dcd4b33ed6_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-10-25_d1bfb5f7d85aa65365d223dcd4b33ed6_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- SHA256 ad8152c4d752728b3ac89fa2c3b49a22556d072ac5142f8bf96565e287779ff4
- MD5 d1bfb5f7d85aa65365d223dcd4b33ed6
- SHA1 690d364e47f00e670053f110c9744c81137fc414
- SHA512 3e8a5a1c2ddae61ba0893d3789cdd10cc92716e3019fcf32009de6b72cda0a4d4f980ed7382f169b71972141ce79db8422127d545b3d18465316e842575756a0
- SSDEEP 6144:QflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:QflfAsiVGjSGecvX
- TLSH T12E747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE