General
- Target 2026-08-03_f4129140a101dbe3a7f8abb4c9e9fc81_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 92KB
- Sample260804-kw3h3agd88
- SHA256 476b5bd7eb5a8a0d768ab05f9b769e75cce3a8b62df2189219ac77cd53f503bf
- MD5 f4129140a101dbe3a7f8abb4c9e9fc81
- SHA1 102fee9dfcccddba42593231040b2ed741c83fd1
- SHA512 d06b0bc5f04767298291c60fc594653f0d6f7a97130c3ddf965e9621e5eec94780babc889153b0beb96b68157487f7f97ea4db1f0297dfb5d65c3840e1ca9722
- SSDEEP 1536:SP3DgM88ic7AIXw3Psvl+AfSofXGfN19D+2M2GAoUglcsddLtlQRHLS6S:GR8yl+jofXGfN1BnMJUpsddH
- TLSH T16A9307357BC54572F33796B489F681D2BA7AB8233911580F248A53490D33B92AEF271F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_f4129140a101dbe3a7f8abb4c9e9fc81_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_f4129140a101dbe3a7f8abb4c9e9fc81_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_f4129140a101dbe3a7f8abb4c9e9fc81_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 92KB
- SHA256 476b5bd7eb5a8a0d768ab05f9b769e75cce3a8b62df2189219ac77cd53f503bf
- MD5 f4129140a101dbe3a7f8abb4c9e9fc81
- SHA1 102fee9dfcccddba42593231040b2ed741c83fd1
- SHA512 d06b0bc5f04767298291c60fc594653f0d6f7a97130c3ddf965e9621e5eec94780babc889153b0beb96b68157487f7f97ea4db1f0297dfb5d65c3840e1ca9722
- SSDEEP 1536:SP3DgM88ic7AIXw3Psvl+AfSofXGfN19D+2M2GAoUglcsddLtlQRHLS6S:GR8yl+jofXGfN1BnMJUpsddH
- TLSH T16A9307357BC54572F33796B489F681D2BA7AB8233911580F248A53490D33B92AEF271F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.