General
- Target 2026-10-30_4f127295152046b24ea03f9be5a5a9c0_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- Sample261101-da9a6astf1
- SHA256 ad01b81f6b138e725a406e6fbb4c653848dc27184c036ae4d52ccbe93ee35778
- MD5 4f127295152046b24ea03f9be5a5a9c0
- SHA1 4ad2ff15fb0b5c4392e20c3f3c826ad46613772a
- SHA512 a9c72d4a833a6409f801dbe225e7805da8c242f29c811076b0f9679c8f48056d34738f36050f88bcdd476da7383d2615d8ae73b422834a875ba0e33b8d1317ce
- SSDEEP 6144:bflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:bflfAsiVGjSGecvX
- TLSH T189747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-30_4f127295152046b24ea03f9be5a5a9c0_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-10-30_4f127295152046b24ea03f9be5a5a9c0_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 361KB
- SHA256 ad01b81f6b138e725a406e6fbb4c653848dc27184c036ae4d52ccbe93ee35778
- MD5 4f127295152046b24ea03f9be5a5a9c0
- SHA1 4ad2ff15fb0b5c4392e20c3f3c826ad46613772a
- SHA512 a9c72d4a833a6409f801dbe225e7805da8c242f29c811076b0f9679c8f48056d34738f36050f88bcdd476da7383d2615d8ae73b422834a875ba0e33b8d1317ce
- SSDEEP 6144:bflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:bflfAsiVGjSGecvX
- TLSH T189747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE