General
- Target 2026-05-05_86f0031f2b8151cc5348acf551b52eb8_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_tofsee
- Size 819KB
- Sample260505-efffpsfz7y
- SHA256 5c11e6419e783d822dc03c865d72526349d31eafe0bfb8de00bc02909f1db3be
- MD5 86f0031f2b8151cc5348acf551b52eb8
- SHA1 85e7cf0b74e5a4f598cf7a62e0b99550e2762c1a
- SHA512 570bf9ed53b3b4f9b76947a48bcf982bc39f5b68ca0de690d02188ef992484d5eccfd394e663bc8c97daf9db4440e602e3b20bf0e1c52ee0a8141daa9190ff49
- SSDEEP 12288:P4Ryed8I7r/7mdUd6bi9I6Sk7a3iwbihym2g7XO3LWUQfh4Co:P4R5CIH/7JI1p+gkE2fh4Co
- TLSH T1EB053A26F6648236E073C079C5E2A69AE9313C610B3089CB5385F76C3E736D3E536726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-05_86f0031f2b8151cc5348acf551b52eb8_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_tofsee.exe
Resource
win10v2004-20260130-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-05_86f0031f2b8151cc5348acf551b52eb8_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_tofsee.exe
Resource
win11-20260130-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-05_86f0031f2b8151cc5348acf551b52eb8_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_tofsee
- Size 819KB
- SHA256 5c11e6419e783d822dc03c865d72526349d31eafe0bfb8de00bc02909f1db3be
- MD5 86f0031f2b8151cc5348acf551b52eb8
- SHA1 85e7cf0b74e5a4f598cf7a62e0b99550e2762c1a
- SHA512 570bf9ed53b3b4f9b76947a48bcf982bc39f5b68ca0de690d02188ef992484d5eccfd394e663bc8c97daf9db4440e602e3b20bf0e1c52ee0a8141daa9190ff49
- SSDEEP 12288:P4Ryed8I7r/7mdUd6bi9I6Sk7a3iwbihym2g7XO3LWUQfh4Co:P4R5CIH/7JI1p+gkE2fh4Co
- TLSH T1EB053A26F6648236E073C079C5E2A69AE9313C610B3089CB5385F76C3E736D3E536726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10Grants admin privileges
Uses net.exe to modify the user's privileges.
Disables service(s)
Executes dropped EXE
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Account Manipulation
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Account Manipulation
1Create or Modify System Process
1Windows Service
1