General
- Target 2026-08-05_5f347cec6c7b598637933198cb1645c6_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 93KB
- Sample260805-k4xmsatelg
- SHA256 6fc007fb497b2f1f2e5e1f6b9f615d2df444388b421d8ddbf8dfffd5f71900c2
- MD5 5f347cec6c7b598637933198cb1645c6
- SHA1 73fc1638d74abb0b1fd22e504495ad63c794785e
- SHA512 01bc8c6f0d325963bb2109d342903496ea0c017d8358055a6cbe6049ea814fb72618aaca6bfcf214cd4189b582569f46c988730df90473fe98dcc80f2850a9ea
- SSDEEP 1536:SP3DgM88ic7AIXw3Psvl+AfSofXGfN19D+2M2GAoUglcsddLtlQRHLSgM:GR8yl+jofXGfN1BnMJUpsddoM
- TLSH T16393F735BBC54572F337967489F681D2BA7AB8233911580F248A53490D33B92AEF271F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_5f347cec6c7b598637933198cb1645c6_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_5f347cec6c7b598637933198cb1645c6_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_5f347cec6c7b598637933198cb1645c6_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 93KB
- SHA256 6fc007fb497b2f1f2e5e1f6b9f615d2df444388b421d8ddbf8dfffd5f71900c2
- MD5 5f347cec6c7b598637933198cb1645c6
- SHA1 73fc1638d74abb0b1fd22e504495ad63c794785e
- SHA512 01bc8c6f0d325963bb2109d342903496ea0c017d8358055a6cbe6049ea814fb72618aaca6bfcf214cd4189b582569f46c988730df90473fe98dcc80f2850a9ea
- SSDEEP 1536:SP3DgM88ic7AIXw3Psvl+AfSofXGfN19D+2M2GAoUglcsddLtlQRHLSgM:GR8yl+jofXGfN1BnMJUpsddoM
- TLSH T16393F735BBC54572F337967489F681D2BA7AB8233911580F248A53490D33B92AEF271F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.