General
- Target 2026-03-25_c13d9e0926eed5222edf2fd58565f197_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 994KB
- Sample260325-kr93cacw2w
- SHA256 e964726655a16e4ac0a853fcafb133d83601a92ac5d35d0e10d7b0ef7d5adc21
- MD5 c13d9e0926eed5222edf2fd58565f197
- SHA1 0810e37364ee65ab268072da23de99369adf54d2
- SHA512 7da9f146a43901d9d780abb648225c50c3caecf1ac8a71034d95cb98c9cf63be02c089fdf9a1add0ad7eefd296e0f8f2170c5140d3f888817e9ec31330b612a1
- SSDEEP 6144:5TtFuHkYLSarMNcw2eKnU0PMEXJRoJKJ8JCJ5J5JDJuJMJuJ6JuJDJuJ8JuJiJub:RqHkYmaIj2m0dbKJ6
- TLSH T1A12508A111D85CEAE5AB133D35B33F1BCD80BF700962656158C8998FAE8DDD70A1C7B2
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-03-25_c13d9e0926eed5222edf2fd58565f197_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260130-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
stealc
Botnet
-
3
C2
-
http://joscramp.top
Attributes
-
url_path
/410b5129171f10ea.php
rc4.plain
Targets
-
- Target 2026-03-25_c13d9e0926eed5222edf2fd58565f197_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 994KB
- SHA256 e964726655a16e4ac0a853fcafb133d83601a92ac5d35d0e10d7b0ef7d5adc21
- MD5 c13d9e0926eed5222edf2fd58565f197
- SHA1 0810e37364ee65ab268072da23de99369adf54d2
- SHA512 7da9f146a43901d9d780abb648225c50c3caecf1ac8a71034d95cb98c9cf63be02c089fdf9a1add0ad7eefd296e0f8f2170c5140d3f888817e9ec31330b612a1
- SSDEEP 6144:5TtFuHkYLSarMNcw2eKnU0PMEXJRoJKJ8JCJ5J5JDJuJMJuJ6JuJDJuJ8JuJiJub:RqHkYmaIj2m0dbKJ6
- TLSH T1A12508A111D85CEAE5AB133D35B33F1BCD80BF700962656158C8998FAE8DDD70A1C7B2
- MD5 SHA1 SHA512 SSDEEP TLSH
Stealc family