General

  • Target
    2026-08-08_5580cb35f6f0b8b7e4ba136cb9b84abf_amadey_elex_karagany_manuscrypt_redline-stealer_rhadamanthys_smoke-loader_stop
  • Size 78KB
  • Sample260808-d44mrsbe53
  • SHA256 e710ce9927a2e9bfab7b76bc1607b514a52393ec2b39d8e139b46a6dc7a8f138
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-08-08_5580cb35f6f0b8b7e4ba136cb9b84abf_amadey_elex_karagany_manuscrypt_redline-stealer_rhadamanthys_smoke-loader_stop
    • Size 78KB
    • SHA256 e710ce9927a2e9bfab7b76bc1607b514a52393ec2b39d8e139b46a6dc7a8f138
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detects LittleDaemon payload

    • Family: LittleDaemon

      LittleDaemon is the first stage used to deploy the SlowStepper backdoor via DaemonicLogistics.

    • Deletes itself

    • Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks