General
- Target 2026-07-20_1c00d705dc4587c58e576e1f04c87c56_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 96KB
- Sample260720-n6efrshs8l
- SHA256 28e69d5473a281da811b53e1cd609cb20f243f610c046ff50b7b7ae97023695a
- MD5 1c00d705dc4587c58e576e1f04c87c56
- SHA1 4f44bc8a1badd60431d4463b85c938e11c13ed3b
- SHA512 4d5082690a0f9963bf50f1428acb977667ce506f9cefeae63974706d317f33cf9eaad07dcad91b65f741d8a4a545ff633d88d474eff2233a12d7db5091dd6d9e
- SSDEEP 1536:SP3DgM88ic7AIXw3Psvl+AfSofXGfN19D+2M2GAoUglcsddLtlQRHLSgRhrFfAw:GR8yl+jofXGfN1BnMJUpsddoJ
- TLSH T197A3D6357FC54572F33786B589F581D6BA7AB8233911580F248A53490C33B92AEF261F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_1c00d705dc4587c58e576e1f04c87c56_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_1c00d705dc4587c58e576e1f04c87c56_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_1c00d705dc4587c58e576e1f04c87c56_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 96KB
- SHA256 28e69d5473a281da811b53e1cd609cb20f243f610c046ff50b7b7ae97023695a
- MD5 1c00d705dc4587c58e576e1f04c87c56
- SHA1 4f44bc8a1badd60431d4463b85c938e11c13ed3b
- SHA512 4d5082690a0f9963bf50f1428acb977667ce506f9cefeae63974706d317f33cf9eaad07dcad91b65f741d8a4a545ff633d88d474eff2233a12d7db5091dd6d9e
- SSDEEP 1536:SP3DgM88ic7AIXw3Psvl+AfSofXGfN19D+2M2GAoUglcsddLtlQRHLSgRhrFfAw:GR8yl+jofXGfN1BnMJUpsddoJ
- TLSH T197A3D6357FC54572F33786B589F581D6BA7AB8233911580F248A53490C33B92AEF261F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.