General
- Target 2026-08-02_0049ae98ce0b4e384b06a6241419f352_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 73KB
- Sample260802-scprvsbf99
- SHA256 744a73dee7f6659d8df4023ae916c65d77758875cb4986d7952af37e69f715cc
- MD5 0049ae98ce0b4e384b06a6241419f352
- SHA1 37cab79368ab9b8211f3ac62724803fccfad97fe
- SHA512 73b1b51784de43e5b311dea7f4c3b3ecfc82d55a561efd2c5d6ed2ea828e34057fdcb7dd435f61210ed70d1215971cd9ab723b8f4d08b5ef90918215f375bba0
- SSDEEP 1536:Om1wCcyp4OH5/PNP4K1d+QXkSofXYVNy4D+jHJGhUXqBsUgTqW:H1sRK1d+QLofXYVNyYqHEUAsU4
- TLSH T16D736D2277D48573F633817448B9C691666ABC123AA1454F3E8DB70E4E733829DB631F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_0049ae98ce0b4e384b06a6241419f352_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_0049ae98ce0b4e384b06a6241419f352_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_0049ae98ce0b4e384b06a6241419f352_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 73KB
- SHA256 744a73dee7f6659d8df4023ae916c65d77758875cb4986d7952af37e69f715cc
- MD5 0049ae98ce0b4e384b06a6241419f352
- SHA1 37cab79368ab9b8211f3ac62724803fccfad97fe
- SHA512 73b1b51784de43e5b311dea7f4c3b3ecfc82d55a561efd2c5d6ed2ea828e34057fdcb7dd435f61210ed70d1215971cd9ab723b8f4d08b5ef90918215f375bba0
- SSDEEP 1536:Om1wCcyp4OH5/PNP4K1d+QXkSofXYVNy4D+jHJGhUXqBsUgTqW:H1sRK1d+QLofXYVNyYqHEUAsU4
- TLSH T16D736D2277D48573F633817448B9C691666ABC123AA1454F3E8DB70E4E733829DB631F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.