General
- Target 2026-08-08_5580cb35f6f0b8b7e4ba136cb9b84abf_amadey_elex_karagany_manuscrypt_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 78KB
- Sample260808-d44mrsbe53
- SHA256 e710ce9927a2e9bfab7b76bc1607b514a52393ec2b39d8e139b46a6dc7a8f138
- MD5 5580cb35f6f0b8b7e4ba136cb9b84abf
- SHA1 d586f5f078fa4ae38a0167ba1cafec89a9c8127f
- SHA512 eb77c85107cd2beab9569e34e7c9f61ee6803062ee576957ab089c9510cfe14d52e325462b81d388c4e5049c24a7f4139110a2ff28edf355791103d987c331a9
- SSDEEP 1536:aEiZ95oqh3zpKVHktYbY9KM4o86OctsNtK:wKqh3zMVHktHy6OcqNtK
- TLSH T12B735A2577A1C532E45206349868CBB69B7FBC3157B495C7BBD80B3B1EA03C05E39366
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-08_5580cb35f6f0b8b7e4ba136cb9b84abf_amadey_elex_karagany_manuscrypt_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_5580cb35f6f0b8b7e4ba136cb9b84abf_amadey_elex_karagany_manuscrypt_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_5580cb35f6f0b8b7e4ba136cb9b84abf_amadey_elex_karagany_manuscrypt_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 78KB
- SHA256 e710ce9927a2e9bfab7b76bc1607b514a52393ec2b39d8e139b46a6dc7a8f138
- MD5 5580cb35f6f0b8b7e4ba136cb9b84abf
- SHA1 d586f5f078fa4ae38a0167ba1cafec89a9c8127f
- SHA512 eb77c85107cd2beab9569e34e7c9f61ee6803062ee576957ab089c9510cfe14d52e325462b81d388c4e5049c24a7f4139110a2ff28edf355791103d987c331a9
- SSDEEP 1536:aEiZ95oqh3zpKVHktYbY9KM4o86OctsNtK:wKqh3zMVHktHy6OcqNtK
- TLSH T12B735A2577A1C532E45206349868CBB69B7FBC3157B495C7BBD80B3B1EA03C05E39366
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects LittleDaemon payload
-
Family: LittleDaemon
LittleDaemon is the first stage used to deploy the SlowStepper backdoor via DaemonicLogistics.
-
Deletes itself
-
Executes dropped EXE