General
- Target 2026-07-20_0d024ad678ae48a7a60925fc1a467ce4_amadey_elex_karagany_manuscrypt_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 1.7MB
- Sample260720-wsfexaax7j
- SHA256 89483e1b32dd47aecc5720b5412cfcb6fa281ad3cfe3facccaf26b48f6e24039
- MD5 0d024ad678ae48a7a60925fc1a467ce4
- SHA1 7776b1f81d053088c15de78dbba333d37c4a4fbc
- SHA512 d12b7808c004422155d94c8ee5c0b64aa853748b596c3b39fe513ce526bde7d493c19a71d65bc8d081b658ade73d461906edb6324b961ec60c10cd338706b9ae
- SSDEEP 24576:d2DWmOjo8lgtKq9aKMcF17Yh7jcL1GYIKhYNLU/qZ:Lm190fUjIFb
- TLSH T1E885A2B1986A597FE37BCF7B88BA78294A1123B3BF53D4CB5434359514322D2AF0250E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_0d024ad678ae48a7a60925fc1a467ce4_amadey_elex_karagany_manuscrypt_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_0d024ad678ae48a7a60925fc1a467ce4_amadey_elex_karagany_manuscrypt_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_0d024ad678ae48a7a60925fc1a467ce4_amadey_elex_karagany_manuscrypt_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 1.7MB
- SHA256 89483e1b32dd47aecc5720b5412cfcb6fa281ad3cfe3facccaf26b48f6e24039
- MD5 0d024ad678ae48a7a60925fc1a467ce4
- SHA1 7776b1f81d053088c15de78dbba333d37c4a4fbc
- SHA512 d12b7808c004422155d94c8ee5c0b64aa853748b596c3b39fe513ce526bde7d493c19a71d65bc8d081b658ade73d461906edb6324b961ec60c10cd338706b9ae
- SSDEEP 24576:d2DWmOjo8lgtKq9aKMcF17Yh7jcL1GYIKhYNLU/qZ:Lm190fUjIFb
- TLSH T1E885A2B1986A597FE37BCF7B88BA78294A1123B3BF53D4CB5434359514322D2AF0250E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.