General
- Target 2026-06-28_0031876eada04bd521063d4146a6eaf5_amadey_elex_karagany_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 24.1MB
- Sample260629-a7ew2aay6m
- SHA256 841e1be395325ff696f6ba5c3437dfbbf10064dc3d55d3511f7a831add96788d
- MD5 0031876eada04bd521063d4146a6eaf5
- SHA1 b896866e68cfd0dc5d8d23d0febb388db8a85879
- SHA512 23b4b27ecf0753541f87b9729d2369511d68243ab7edb028ed3ad8de3f666a9f9e05c9d4695a6d219e731e141cedf051c835008bc352021eb165bcde2f7806a6
- SSDEEP 393216:t25KNcTJObX5FUT5M9Sc2rr6of5MJ7ZWqxPAIgtMIMlFRqFzSl8tGztnNR1:QKN+JObJyM9irrKJBH5lFRqhSRBn
- TLSH T1DF4733139DB9A574E752497C0AA6B5387B3A9E306B3D82C3714439AE7E732D81BF4304
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-06-28_0031876eada04bd521063d4146a6eaf5_amadey_elex_karagany_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_0031876eada04bd521063d4146a6eaf5_amadey_elex_karagany_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win11ltsc2024-20260618-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_0031876eada04bd521063d4146a6eaf5_amadey_elex_karagany_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 24.1MB
- SHA256 841e1be395325ff696f6ba5c3437dfbbf10064dc3d55d3511f7a831add96788d
- MD5 0031876eada04bd521063d4146a6eaf5
- SHA1 b896866e68cfd0dc5d8d23d0febb388db8a85879
- SHA512 23b4b27ecf0753541f87b9729d2369511d68243ab7edb028ed3ad8de3f666a9f9e05c9d4695a6d219e731e141cedf051c835008bc352021eb165bcde2f7806a6
- SSDEEP 393216:t25KNcTJObX5FUT5M9Sc2rr6of5MJ7ZWqxPAIgtMIMlFRqFzSl8tGztnNR1:QKN+JObJyM9irrKJBH5lFRqhSRBn
- TLSH T1DF4733139DB9A574E752497C0AA6B5387B3A9E306B3D82C3714439AE7E732D81BF4304
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.