General
- Target 2026-06-01_a6455bf592b47b1ec4fdaa6045564a68_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 1.2MB
- Sample260601-gr8mqsdt5t
- SHA256 1881de01f5deec21434a6079d2f74123ecbf0b0edcfee93962f3e510442c7717
- MD5 a6455bf592b47b1ec4fdaa6045564a68
- SHA1 b13da96a0b343d20403995a809bf45bf2cf56b2e
- SHA512 d09682c6e308c918fe9e6b62611c3e6187bdbb0d5d16273bea2c336aa5022ae154e8924f25c98c777ae29e3c58c13158979d7663c1392385113741633f0bc490
- SSDEEP 3072:s7kBNK83DiD6L5u58BfxnJDfogQx3tJiwCI85iI/xfx8Pr/ZN15lTbvxO7qMa2j3:s78bzi+LU6f9Qx3siIpMC7XdOZx
- TLSH T14A457C013593C432D1D62579DC21CAF81B6EBC719962694FBAC93F7E3F392D2962430A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-01_a6455bf592b47b1ec4fdaa6045564a68_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-01_a6455bf592b47b1ec4fdaa6045564a68_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11-20260513-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
pub1
Extracted
Family
-
smokeloader
Version
-
2020
C2
-
http://oversun.monster/upload/
-
http://oversun.net/upload/
-
http://dingobossin.com/upload/
-
http://duda1.monster/upload/
-
http�//vinder55.monster/upload/
-
http://jamb2.monster/upload/
rc4.i32
rc4.i32
Targets
-
- Target 2026-06-01_a6455bf592b47b1ec4fdaa6045564a68_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 1.2MB
- SHA256 1881de01f5deec21434a6079d2f74123ecbf0b0edcfee93962f3e510442c7717
- MD5 a6455bf592b47b1ec4fdaa6045564a68
- SHA1 b13da96a0b343d20403995a809bf45bf2cf56b2e
- SHA512 d09682c6e308c918fe9e6b62611c3e6187bdbb0d5d16273bea2c336aa5022ae154e8924f25c98c777ae29e3c58c13158979d7663c1392385113741633f0bc490
- SSDEEP 3072:s7kBNK83DiD6L5u58BfxnJDfogQx3tJiwCI85iI/xfx8Pr/ZN15lTbvxO7qMa2j3:s78bzi+LU6f9Qx3siIpMC7XdOZx
- TLSH T14A457C013593C432D1D62579DC21CAF81B6EBC719962694FBAC93F7E3F392D2962430A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Deletes itself
-
Loads dropped DLL