General
- Target 2026-05-17_486344819ce4ab365fcfb9b9619eae28_elex_redline-stealer_rhadamanthys_smoke-loader_tofsee
- Size 165KB
- Sample260517-eemhmab17x
- SHA256 5765e3c667793cd62c86d1cb64de65cde704daf5557237473dc6e5b38e64ed12
- MD5 486344819ce4ab365fcfb9b9619eae28
- SHA1 fd8fb80be14b4aa78372e3a9738c8862c68bf891
- SHA512 2d021dfde8abd119bdf48dd41cf2efc7331bb3182050f2f1c170ceb7d2a636b14262903a97b12394bb6d640e964e50820e53a4a0638769a8058710e43f1a978f
- SSDEEP 3072:IUu5AV9IzF4R+iA9aI6Ks2pWqSsg2Ew++bx:IUlIzFbi9I6KMHeEw3b
- TLSH T1B7F37D2716D4F036E3D312348A68E2B25A7D763509C5DA0BAB90422A3D71393F7B970F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-17_486344819ce4ab365fcfb9b9619eae28_elex_redline-stealer_rhadamanthys_smoke-loader_tofsee.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-17_486344819ce4ab365fcfb9b9619eae28_elex_redline-stealer_rhadamanthys_smoke-loader_tofsee
- Size 165KB
- SHA256 5765e3c667793cd62c86d1cb64de65cde704daf5557237473dc6e5b38e64ed12
- MD5 486344819ce4ab365fcfb9b9619eae28
- SHA1 fd8fb80be14b4aa78372e3a9738c8862c68bf891
- SHA512 2d021dfde8abd119bdf48dd41cf2efc7331bb3182050f2f1c170ceb7d2a636b14262903a97b12394bb6d640e964e50820e53a4a0638769a8058710e43f1a978f
- SSDEEP 3072:IUu5AV9IzF4R+iA9aI6Ks2pWqSsg2Ew++bx:IUlIzFbi9I6KMHeEw3b
- TLSH T1B7F37D2716D4F036E3D312348A68E2B25A7D763509C5DA0BAB90422A3D71393F7B970F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.