General
- Target 2026-02-11_ccc781195f3c854deb8877da38e4960c_amadey_elex_karagany_manuscrypt_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 73KB
- Sample260211-jl68tscw7b
- SHA256 c9c7e582752e236915f3aa6f55e95a61ba1daecf13075bc00c8600be21857045
- MD5 ccc781195f3c854deb8877da38e4960c
- SHA1 0b2e3ff169411fd18b4a67816ad6fc7fca299095
- SHA512 eab7a961c294d8e4725db67f768bfe77a409dcd26a46b40cf526074c9d8afcace265d7c559aefa3e8aa11ac681befea90f1e63a6193b95f90a856d2218d22e46
- SSDEEP 1536:8i7d2wCIrAJuGm/ovGMX06s+jk1Af++CJugvN/G:Z/UJu1ipV87dPvN/G
- TLSH T154736B227A61C232E05215345878D7F55B6EFD7357B885CBBBC90B7E4EA02C08E39366
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-02-11_ccc781195f3c854deb8877da38e4960c_amadey_elex_karagany_manuscrypt_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260130-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-02-11_ccc781195f3c854deb8877da38e4960c_amadey_elex_karagany_manuscrypt_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-02-11_ccc781195f3c854deb8877da38e4960c_amadey_elex_karagany_manuscrypt_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 73KB
- SHA256 c9c7e582752e236915f3aa6f55e95a61ba1daecf13075bc00c8600be21857045
- MD5 ccc781195f3c854deb8877da38e4960c
- SHA1 0b2e3ff169411fd18b4a67816ad6fc7fca299095
- SHA512 eab7a961c294d8e4725db67f768bfe77a409dcd26a46b40cf526074c9d8afcace265d7c559aefa3e8aa11ac681befea90f1e63a6193b95f90a856d2218d22e46
- SSDEEP 1536:8i7d2wCIrAJuGm/ovGMX06s+jk1Af++CJugvN/G:Z/UJu1ipV87dPvN/G
- TLSH T154736B227A61C232E05215345878D7F55B6EFD7357B885CBBBC90B7E4EA02C08E39366
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10LittleDaemon
LittleDaemon is the first stage used to deploy the SlowStepper backdoor via DaemonicLogistics.
Littledaemon family
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.