General
- Target 2026-07-30_b2f1d66545aa245a69408d3d7ddd2b10_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 73KB
- Sample260730-kps12svamf
- SHA256 d03a8ba81fd62a7b4b9d8e249adce4f5d1243948925cfcad69e6cd024caf2ddc
- MD5 b2f1d66545aa245a69408d3d7ddd2b10
- SHA1 48d8b6bb05bdb8239d84644ff62ddadea2dc1bb6
- SHA512 16b294cc59c17581f382f03d53d97d90d567a4b4fad0d1aab0b3b93ce068d940003470be193dcbfc0ac52c47d1b4642762b6fe6900145d0eecba49c8546867ea
- SSDEEP 1536:Om1wCcyp4OH5/PNP4K1d+QXkSofXYVNy4D+jHJGhUXqBsUgTqu:H1sRK1d+QLofXYVNyYqHEUAsUA
- TLSH T161736D2277C48573FA33817448B9C6A1666ABC1236A1454F3E8DB71E4E733829DB631F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_b2f1d66545aa245a69408d3d7ddd2b10_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_b2f1d66545aa245a69408d3d7ddd2b10_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_b2f1d66545aa245a69408d3d7ddd2b10_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 73KB
- SHA256 d03a8ba81fd62a7b4b9d8e249adce4f5d1243948925cfcad69e6cd024caf2ddc
- MD5 b2f1d66545aa245a69408d3d7ddd2b10
- SHA1 48d8b6bb05bdb8239d84644ff62ddadea2dc1bb6
- SHA512 16b294cc59c17581f382f03d53d97d90d567a4b4fad0d1aab0b3b93ce068d940003470be193dcbfc0ac52c47d1b4642762b6fe6900145d0eecba49c8546867ea
- SSDEEP 1536:Om1wCcyp4OH5/PNP4K1d+QXkSofXYVNy4D+jHJGhUXqBsUgTqu:H1sRK1d+QLofXYVNyYqHEUAsUA
- TLSH T161736D2277C48573FA33817448B9C6A1666ABC1236A1454F3E8DB71E4E733829DB631F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.