General
- Target 2026-08-03_43e6f705f3c8b9dafd6bc3ceeec59948_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 92KB
- Sample260804-pekn5sek7v
- SHA256 04aa94716cac49302356876c7172a547ed38a44a51c2f2630678523033cb2158
- MD5 43e6f705f3c8b9dafd6bc3ceeec59948
- SHA1 d049fb677c1da5d46990d98c0c2cd4d0394de3bc
- SHA512 25afb3e193ecb8c538d2c9ed0d1b6be62a328506ad3ca339c57ea8922205fdae259a6f6613e09f42adda521a2a9150f9562a67e0c1df0ccfc6a8fb5c557cc437
- SSDEEP 1536:SP3DgM88ic7AIXw3Psvl+AfSofXGfN19D+2M2GAoUglcsddLtlQRHLS6JJ:GR8yl+jofXGfN1BnMJUpsddC
- TLSH T1A59307357BC54572F33796B489F681D2BA7AB8233911580F248A53490D33B52AEF271F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_43e6f705f3c8b9dafd6bc3ceeec59948_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_43e6f705f3c8b9dafd6bc3ceeec59948_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260710-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_43e6f705f3c8b9dafd6bc3ceeec59948_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 92KB
- SHA256 04aa94716cac49302356876c7172a547ed38a44a51c2f2630678523033cb2158
- MD5 43e6f705f3c8b9dafd6bc3ceeec59948
- SHA1 d049fb677c1da5d46990d98c0c2cd4d0394de3bc
- SHA512 25afb3e193ecb8c538d2c9ed0d1b6be62a328506ad3ca339c57ea8922205fdae259a6f6613e09f42adda521a2a9150f9562a67e0c1df0ccfc6a8fb5c557cc437
- SSDEEP 1536:SP3DgM88ic7AIXw3Psvl+AfSofXGfN19D+2M2GAoUglcsddLtlQRHLS6JJ:GR8yl+jofXGfN1BnMJUpsddC
- TLSH T1A59307357BC54572F33796B489F681D2BA7AB8233911580F248A53490D33B52AEF271F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.