General
- Target 2026-04-11_6c1adf820d63235ba1e191ee83db4975_amadey_cobalt-strike_elex_icedid_njrat_redline-stealer_rhadamanthys_stealc
- Size 531KB
- Sample260411-pystvsfz2r
- SHA256 d56d03a28fceb84811de44e8daa0b1f185d080429c39da3f20490de38338c5bf
- MD5 6c1adf820d63235ba1e191ee83db4975
- SHA1 d871d9f041e9e47e6bf6712754f74e84de08a9c4
- SHA512 7ce99055d5b27faf1f25935e07383dfd6b19c452109db666494b941386b62f6c573e03e8e02d89a231d72281b05aaaa87cf88a607258c84573b55081f8c34d6d
- SSDEEP 12288:TfaWszqh3xwyHSWDXer5+nZoFer5+nZo:TfPZhBwLWDvi
- TLSH T13BC45C0E367574E2D5724F309C2486A0567BB8A37E51AAAB29C4931E4C773F4CE27F24
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-11_6c1adf820d63235ba1e191ee83db4975_amadey_cobalt-strike_elex_icedid_njrat_redline-stealer_rhadamanthys_stealc.exe
Resource
win10v2004-20260130-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-11_6c1adf820d63235ba1e191ee83db4975_amadey_cobalt-strike_elex_icedid_njrat_redline-stealer_rhadamanthys_stealc.exe
Resource
win11-20260130-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-11_6c1adf820d63235ba1e191ee83db4975_amadey_cobalt-strike_elex_icedid_njrat_redline-stealer_rhadamanthys_stealc
- Size 531KB
- SHA256 d56d03a28fceb84811de44e8daa0b1f185d080429c39da3f20490de38338c5bf
- MD5 6c1adf820d63235ba1e191ee83db4975
- SHA1 d871d9f041e9e47e6bf6712754f74e84de08a9c4
- SHA512 7ce99055d5b27faf1f25935e07383dfd6b19c452109db666494b941386b62f6c573e03e8e02d89a231d72281b05aaaa87cf88a607258c84573b55081f8c34d6d
- SSDEEP 12288:TfaWszqh3xwyHSWDXer5+nZoFer5+nZo:TfPZhBwLWDvi
- TLSH T13BC45C0E367574E2D5724F309C2486A0567BB8A37E51AAAB29C4931E4C773F4CE27F24
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
-
Azorult family