General
- Target 2026-08-05_f41ecab2d43755bd2b65a94e733e76ad_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 93KB
- Sample260805-kywtascq5x
- SHA256 a6e1610ea0155a75add3e6d3def041f8893b00f6f6b29fc8fdd695b2ed6d7f29
- MD5 f41ecab2d43755bd2b65a94e733e76ad
- SHA1 4651c4260255cde5cb1b6713b1db58e8543e6f62
- SHA512 6e1b38dcf6b00e9b185c36baedf525c7951f7867202fda4afb229f27c71bf4ed0ed7a7ed567a8e1a0d627ebb465746a07b25eff91f7ab527946c2cc728b52f68
- SSDEEP 1536:SP3DgM88ic7AIXw3Psvl+AfSofXGfN19D+2M2GAoUglcsddLtlQRHLSgT:GR8yl+jofXGfN1BnMJUpsddoT
- TLSH T10893F735BBC54572F33796B489F681D2BA7AB8233911580F248A53490D33B52AEF271F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_f41ecab2d43755bd2b65a94e733e76ad_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_f41ecab2d43755bd2b65a94e733e76ad_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_f41ecab2d43755bd2b65a94e733e76ad_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 93KB
- SHA256 a6e1610ea0155a75add3e6d3def041f8893b00f6f6b29fc8fdd695b2ed6d7f29
- MD5 f41ecab2d43755bd2b65a94e733e76ad
- SHA1 4651c4260255cde5cb1b6713b1db58e8543e6f62
- SHA512 6e1b38dcf6b00e9b185c36baedf525c7951f7867202fda4afb229f27c71bf4ed0ed7a7ed567a8e1a0d627ebb465746a07b25eff91f7ab527946c2cc728b52f68
- SSDEEP 1536:SP3DgM88ic7AIXw3Psvl+AfSofXGfN19D+2M2GAoUglcsddLtlQRHLSgT:GR8yl+jofXGfN1BnMJUpsddoT
- TLSH T10893F735BBC54572F33796B489F681D2BA7AB8233911580F248A53490D33B52AEF271F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.