General
- Target 2026-08-04_4b72488e161788138f82b90ed514b215_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 93KB
- Sample260804-ta5wqsdb86
- SHA256 69d7e9a0a86e2a55cd1f31b4f43cc6724901d9fb1266d15e6cf906308505c0f9
- MD5 4b72488e161788138f82b90ed514b215
- SHA1 5696617e70db07bcc331aef02e558d27ee20efce
- SHA512 98201de900f4be143620bbd17b705e1929bcb6825b4a8468d0b1fc8e5b33e479060edc72f7dcb511711cfcdc2c5ca8aa19f79f248f668044f6e02690a766e1b4
- SSDEEP 1536:SP3DgM88ic7AIXw3Psvl+AfSofXGfN19D+2M2GAoUglcsddLtlQRHLSgz:GR8yl+jofXGfN1BnMJUpsddoz
- TLSH T1CF93F735BBC54572F337967489F681D2BA7AB8233911580F248A53490D33B92AEF271F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_4b72488e161788138f82b90ed514b215_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_4b72488e161788138f82b90ed514b215_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_4b72488e161788138f82b90ed514b215_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 93KB
- SHA256 69d7e9a0a86e2a55cd1f31b4f43cc6724901d9fb1266d15e6cf906308505c0f9
- MD5 4b72488e161788138f82b90ed514b215
- SHA1 5696617e70db07bcc331aef02e558d27ee20efce
- SHA512 98201de900f4be143620bbd17b705e1929bcb6825b4a8468d0b1fc8e5b33e479060edc72f7dcb511711cfcdc2c5ca8aa19f79f248f668044f6e02690a766e1b4
- SSDEEP 1536:SP3DgM88ic7AIXw3Psvl+AfSofXGfN19D+2M2GAoUglcsddLtlQRHLSgz:GR8yl+jofXGfN1BnMJUpsddoz
- TLSH T1CF93F735BBC54572F337967489F681D2BA7AB8233911580F248A53490D33B92AEF271F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.