General
- Target 2026-08-08_e18f88799adb1312ca82fd8842fe27af_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 81KB
- Sample260809-ab8t8sz1cv
- SHA256 49d6d4cae84858f47aa3b421208dc02125ac844d5e90754edf4b82f2811cff1f
- MD5 e18f88799adb1312ca82fd8842fe27af
- SHA1 325a9464c03d95182a52a2fa5698f5815befb461
- SHA512 5c577905b85851be5980cc5a00933fac94c445875208b9da3327a19c76128ac57c79d33707c89e8c2159534c6ff0560a86b69c98baed81e87495f33a0009ad16
- SSDEEP 1536:1E4ycMQw+5fPsCG+dY0jSXgCN90Wg05weUVWIbEe:1E0G+zjSXgCN9hg0VUHbD
- TLSH T149836C5273C484B3F83251780879C561575BBC2627A0068F3F8DB76E5EB23825EBA31B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_e18f88799adb1312ca82fd8842fe27af_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_e18f88799adb1312ca82fd8842fe27af_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_e18f88799adb1312ca82fd8842fe27af_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 81KB
- SHA256 49d6d4cae84858f47aa3b421208dc02125ac844d5e90754edf4b82f2811cff1f
- MD5 e18f88799adb1312ca82fd8842fe27af
- SHA1 325a9464c03d95182a52a2fa5698f5815befb461
- SHA512 5c577905b85851be5980cc5a00933fac94c445875208b9da3327a19c76128ac57c79d33707c89e8c2159534c6ff0560a86b69c98baed81e87495f33a0009ad16
- SSDEEP 1536:1E4ycMQw+5fPsCG+dY0jSXgCN90Wg05weUVWIbEe:1E0G+zjSXgCN9hg0VUHbD
- TLSH T149836C5273C484B3F83251780879C561575BBC2627A0068F3F8DB76E5EB23825EBA31B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.