General
- Target 2026-08-02_53c7c6a56e0c1476ff0d1c35cae90ffe_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 73KB
- Sample260802-kl5knsfg62
- SHA256 aadcc588a671efc0d0cc2bd700d1afe592dc2b3c55f8018268c08e3568b4f88a
- MD5 53c7c6a56e0c1476ff0d1c35cae90ffe
- SHA1 17cac457222afb0fde5b51b234f0bb46c52e1d28
- SHA512 7ce908c8982700c53d735ec3d629fccdf5194289c5f5537f45d2d2ac3c68e3726073deed11c61892f0021a05a3c354508d02d1bb8be37db50d08725e864b621d
- SSDEEP 1536:Om1wCcyp4OH5/PNP4K1d+QXkSofXYVNy4D+jHJGhUXqBsUgTqy:H1sRK1d+QLofXYVNyYqHEUAsUU
- TLSH T102736D2277D48573FA33817448B9C691666ABC123AA1454F3E8DB70E4E733829DB631F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_53c7c6a56e0c1476ff0d1c35cae90ffe_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_53c7c6a56e0c1476ff0d1c35cae90ffe_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_53c7c6a56e0c1476ff0d1c35cae90ffe_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 73KB
- SHA256 aadcc588a671efc0d0cc2bd700d1afe592dc2b3c55f8018268c08e3568b4f88a
- MD5 53c7c6a56e0c1476ff0d1c35cae90ffe
- SHA1 17cac457222afb0fde5b51b234f0bb46c52e1d28
- SHA512 7ce908c8982700c53d735ec3d629fccdf5194289c5f5537f45d2d2ac3c68e3726073deed11c61892f0021a05a3c354508d02d1bb8be37db50d08725e864b621d
- SSDEEP 1536:Om1wCcyp4OH5/PNP4K1d+QXkSofXYVNy4D+jHJGhUXqBsUgTqy:H1sRK1d+QLofXYVNyYqHEUAsUU
- TLSH T102736D2277D48573FA33817448B9C691666ABC123AA1454F3E8DB70E4E733829DB631F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.