General
- Target 2026-07-10_6d58bad2c9985a11d7ddacd5c5e74ecc_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 6.3MB
- Sample260710-mfd7msav9z
- SHA256 a1a79919f56d65b5515439cf613654a1851a98b1bfc158b78400299595aa1e93
- MD5 6d58bad2c9985a11d7ddacd5c5e74ecc
- SHA1 af9c50baf7b40503112326605a3b6646bda72014
- SHA512 d4668d08636a070385cfda044b5ffdedd046de18c328668dee92a1067fa6501daeabb160488e15748c26a3e1966bd8897fa2bff53edfe491afa9e583777c6b6f
- SSDEEP 196608:ZwdjLs+UIkzHlAv4X6zQRgiwHLD2LQIX:idjaxFFP1iLD2Ln
- TLSH T10B663333B9549032D26214B3E555D670BE3D70282F2048FB9794DB1A39B89C6BBFB247
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-10_6d58bad2c9985a11d7ddacd5c5e74ecc_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_6d58bad2c9985a11d7ddacd5c5e74ecc_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_6d58bad2c9985a11d7ddacd5c5e74ecc_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 6.3MB
- SHA256 a1a79919f56d65b5515439cf613654a1851a98b1bfc158b78400299595aa1e93
- MD5 6d58bad2c9985a11d7ddacd5c5e74ecc
- SHA1 af9c50baf7b40503112326605a3b6646bda72014
- SHA512 d4668d08636a070385cfda044b5ffdedd046de18c328668dee92a1067fa6501daeabb160488e15748c26a3e1966bd8897fa2bff53edfe491afa9e583777c6b6f
- SSDEEP 196608:ZwdjLs+UIkzHlAv4X6zQRgiwHLD2LQIX:idjaxFFP1iLD2Ln
- TLSH T10B663333B9549032D26214B3E555D670BE3D70282F2048FB9794DB1A39B89C6BBFB247
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.