General
- Target 2026-07-23_64343f07b8ba7335d3010ba2badb8159_elex_redline-stealer_rhadamanthys_smoke-loader_tofsee
- Size 165KB
- Sample260723-dagadazeja
- SHA256 b536a7618697a637df93e34660cc83ac2d5e6c9832a278760eb3dea457eef774
- MD5 64343f07b8ba7335d3010ba2badb8159
- SHA1 9ee0e17d67861e2e199c313191c4b25afad9ee67
- SHA512 dade994a81a620881c1dd0de8e15bfa3ffc1e85a471d7f3b338eb5d61d8ffe844ca4ed81afab48563ea73697df4dba8717a8a5ff79aeb516367c4dbe0a6b2ee4
- SSDEEP 3072:pUu5AV9IzF4R+iA9aI6Ks2pWqSwvg2Ew++bx:pUlIzFbi9I6KMHwHEw3b
- TLSH T104F37D2716D4F032E39312348A69E2B25A7D763509C5DE0BAB90422A3D71793F7B970F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_64343f07b8ba7335d3010ba2badb8159_elex_redline-stealer_rhadamanthys_smoke-loader_tofsee.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_64343f07b8ba7335d3010ba2badb8159_elex_redline-stealer_rhadamanthys_smoke-loader_tofsee
- Size 165KB
- SHA256 b536a7618697a637df93e34660cc83ac2d5e6c9832a278760eb3dea457eef774
- MD5 64343f07b8ba7335d3010ba2badb8159
- SHA1 9ee0e17d67861e2e199c313191c4b25afad9ee67
- SHA512 dade994a81a620881c1dd0de8e15bfa3ffc1e85a471d7f3b338eb5d61d8ffe844ca4ed81afab48563ea73697df4dba8717a8a5ff79aeb516367c4dbe0a6b2ee4
- SSDEEP 3072:pUu5AV9IzF4R+iA9aI6Ks2pWqSwvg2Ew++bx:pUlIzFbi9I6KMHwHEw3b
- TLSH T104F37D2716D4F032E39312348A69E2B25A7D763509C5DE0BAB90422A3D71793F7B970F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.