General
- Target 2026-08-01_f822cdf7d18cd26799dc579ca5e8bb27_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 94KB
- Sample260801-pknb8avdrd
- SHA256 61e6386b93a2bf6b2f8def9376f53073428a45e6d3e7da10861b3e46abff1905
- MD5 f822cdf7d18cd26799dc579ca5e8bb27
- SHA1 ca6d55d26f40ce0146d7f1bd159345c042a72ab2
- SHA512 4a08965b9c9dd12fd6a4c79f281e344fa0231565b8289bb717e47561563cd382ba4dcc81c3f21f960be78b28ac537ca467d4024848155464de2693e88827552f
- SSDEEP 1536:SP3DgM88ic7AIXw3Psvl+AfSofXGfN19D+2M2GAoUglcsddLtlQRHLS62aDl:GR8yl+jofXGfN1BnMJUpsdd+B
- TLSH T12493E5357BC54572F337C6B589F681D2BA7AB8233911580F248A53490C33B92AEF261F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_f822cdf7d18cd26799dc579ca5e8bb27_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_f822cdf7d18cd26799dc579ca5e8bb27_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_f822cdf7d18cd26799dc579ca5e8bb27_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 94KB
- SHA256 61e6386b93a2bf6b2f8def9376f53073428a45e6d3e7da10861b3e46abff1905
- MD5 f822cdf7d18cd26799dc579ca5e8bb27
- SHA1 ca6d55d26f40ce0146d7f1bd159345c042a72ab2
- SHA512 4a08965b9c9dd12fd6a4c79f281e344fa0231565b8289bb717e47561563cd382ba4dcc81c3f21f960be78b28ac537ca467d4024848155464de2693e88827552f
- SSDEEP 1536:SP3DgM88ic7AIXw3Psvl+AfSofXGfN19D+2M2GAoUglcsddLtlQRHLS62aDl:GR8yl+jofXGfN1BnMJUpsdd+B
- TLSH T12493E5357BC54572F337C6B589F681D2BA7AB8233911580F248A53490C33B92AEF261F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.