General
- Target 2026-07-29_f849c25bf9ac802ab829d3ada9de130f_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 73KB
- Sample260729-lay47azgqf
- SHA256 114c928ee2a0e680250b72042fb738261a080ed4f2e82857db92494770286743
- MD5 f849c25bf9ac802ab829d3ada9de130f
- SHA1 d0465149b9fa63ed391aa43342d76ef7df56ec90
- SHA512 76c54983da327d71959969e07e30097557f3210e61572d1d42a6d1076eb92843937817ba98d1cd7734f3e4f9559c315fdacb4215302ab3712a81b8948455dd5d
- SSDEEP 1536:Om1wCcyp4OH5/PNP4K1d+QXkSofXYVNy4D+jHJGhUXqBsUgTqq:H1sRK1d+QLofXYVNyYqHEUAsUs
- TLSH T1C0736C2277C48573FA33817448B9C6A1666ABC1236A1454F3E8EB71E4E733825DB631F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_f849c25bf9ac802ab829d3ada9de130f_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_f849c25bf9ac802ab829d3ada9de130f_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_f849c25bf9ac802ab829d3ada9de130f_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 73KB
- SHA256 114c928ee2a0e680250b72042fb738261a080ed4f2e82857db92494770286743
- MD5 f849c25bf9ac802ab829d3ada9de130f
- SHA1 d0465149b9fa63ed391aa43342d76ef7df56ec90
- SHA512 76c54983da327d71959969e07e30097557f3210e61572d1d42a6d1076eb92843937817ba98d1cd7734f3e4f9559c315fdacb4215302ab3712a81b8948455dd5d
- SSDEEP 1536:Om1wCcyp4OH5/PNP4K1d+QXkSofXYVNy4D+jHJGhUXqBsUgTqq:H1sRK1d+QLofXYVNyYqHEUAsUs
- TLSH T1C0736C2277C48573FA33817448B9C6A1666ABC1236A1454F3E8EB71E4E733825DB631F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.