General
- Target 2026-10-31_b512e64983365ef6da2d6a1c26626df1_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- Sample261031-n45vyaa17s
- SHA256 bb5ee5748438f87e0bc7345b1809c63e39759a3eb2398354d1f1e6ef2f7d0cdf
- MD5 b512e64983365ef6da2d6a1c26626df1
- SHA1 d7296b9387948b36c08b27e41f2b02a3cf9161a3
- SHA512 3312225d850067bc2bdf21533412fcb754523f0c803f99ccef41ff656119a9cbf891c2f60b44d048e8f1fae8baa913e47214d94bc238bfc94e0642551afd225b
- SSDEEP 6144:lflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:lflfAsiVGjSGecvX
- TLSH T1F3747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-31_b512e64983365ef6da2d6a1c26626df1_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-10-31_b512e64983365ef6da2d6a1c26626df1_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- SHA256 bb5ee5748438f87e0bc7345b1809c63e39759a3eb2398354d1f1e6ef2f7d0cdf
- MD5 b512e64983365ef6da2d6a1c26626df1
- SHA1 d7296b9387948b36c08b27e41f2b02a3cf9161a3
- SHA512 3312225d850067bc2bdf21533412fcb754523f0c803f99ccef41ff656119a9cbf891c2f60b44d048e8f1fae8baa913e47214d94bc238bfc94e0642551afd225b
- SSDEEP 6144:lflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:lflfAsiVGjSGecvX
- TLSH T1F3747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE