General
- Target 2026-08-04_6acaf65d58ec8f4128c5f4c68da662fd_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 93KB
- Sample260804-sww1aatclb
- SHA256 c6f14ee34f3d8e250dc418aff557f8c0776204259be0d7940f218df6ff58ee30
- MD5 6acaf65d58ec8f4128c5f4c68da662fd
- SHA1 2035bc9dd6fd71e15b7f828f09e1d799a4324417
- SHA512 0bc6c77f0889bae7882fb82dbbaf9495d23d6acb5d38fe2fc2bab1cbb554ea4b51cf58a22129c3b727a11e463e13b8146a824c75015ff3f32610247bec7da9a8
- SSDEEP 1536:SP3DgM88ic7AIXw3Psvl+AfSofXGfN19D+2M2GAoUglcsddLtlQRHLSg3:GR8yl+jofXGfN1BnMJUpsddo3
- TLSH T17193F735BBC54572F337967489F681D2BA7AB8233911580F248A53490D33B92AEF271F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_6acaf65d58ec8f4128c5f4c68da662fd_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_6acaf65d58ec8f4128c5f4c68da662fd_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_6acaf65d58ec8f4128c5f4c68da662fd_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 93KB
- SHA256 c6f14ee34f3d8e250dc418aff557f8c0776204259be0d7940f218df6ff58ee30
- MD5 6acaf65d58ec8f4128c5f4c68da662fd
- SHA1 2035bc9dd6fd71e15b7f828f09e1d799a4324417
- SHA512 0bc6c77f0889bae7882fb82dbbaf9495d23d6acb5d38fe2fc2bab1cbb554ea4b51cf58a22129c3b727a11e463e13b8146a824c75015ff3f32610247bec7da9a8
- SSDEEP 1536:SP3DgM88ic7AIXw3Psvl+AfSofXGfN19D+2M2GAoUglcsddLtlQRHLSg3:GR8yl+jofXGfN1BnMJUpsddo3
- TLSH T17193F735BBC54572F337967489F681D2BA7AB8233911580F248A53490D33B92AEF271F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.