General
- Target 2026-06-27_6497e9b3199407ca0bfb416fd2677561_amadey_elex_karagany_manuscrypt_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 1.3MB
- Sample260629-hettgsft2y
- SHA256 7d355271d45bbfb6de89993d6fd62603fe0dd197cecdd82c0aabccfeb46c7a61
- MD5 6497e9b3199407ca0bfb416fd2677561
- SHA1 a6b99c0773cd575d05f434583a44c468221d1c41
- SHA512 c74ce6014fe29b26a66c83da4dee801b8e59702989fe5204531c9146e12638322eee34677cf4c425e0278759cad77a11934d8db7f8bfe572da8b42ebf1636e07
- SSDEEP 24576:d2QPyoGjDAb2CeCvNxcdxCWCu/zNmqFs8QKOOen:dyHGX1xcXCWF3WOrC
- TLSH T1D655A27195666A3FE33FDB3B88EA3939861527B3BB53A0CB1431319515723C2AF4610E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_6497e9b3199407ca0bfb416fd2677561_amadey_elex_karagany_manuscrypt_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_6497e9b3199407ca0bfb416fd2677561_amadey_elex_karagany_manuscrypt_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260618-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_6497e9b3199407ca0bfb416fd2677561_amadey_elex_karagany_manuscrypt_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 1.3MB
- SHA256 7d355271d45bbfb6de89993d6fd62603fe0dd197cecdd82c0aabccfeb46c7a61
- MD5 6497e9b3199407ca0bfb416fd2677561
- SHA1 a6b99c0773cd575d05f434583a44c468221d1c41
- SHA512 c74ce6014fe29b26a66c83da4dee801b8e59702989fe5204531c9146e12638322eee34677cf4c425e0278759cad77a11934d8db7f8bfe572da8b42ebf1636e07
- SSDEEP 24576:d2QPyoGjDAb2CeCvNxcdxCWCu/zNmqFs8QKOOen:dyHGX1xcXCWF3WOrC
- TLSH T1D655A27195666A3FE33FDB3B88EA3939861527B3BB53A0CB1431319515723C2AF4610E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.