General

  • Target
    2026-06-27_7f6aaba1aab44bf4b5a0167a45ab7a35_amadey_elex_nymaim_redline-stealer_rhadamanthys_smoke-loader_tofsee
  • Size 440KB
  • Sample260629-gdpygad15x
  • SHA256 ba2693158b10f6dcb479da074e7e0dc827c9707ebd53ca150552acda1afaa620
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-06-27_7f6aaba1aab44bf4b5a0167a45ab7a35_amadey_elex_nymaim_redline-stealer_rhadamanthys_smoke-loader_tofsee
    • Size 440KB
    • SHA256 ba2693158b10f6dcb479da074e7e0dc827c9707ebd53ca150552acda1afaa620
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks