General
- Target 2026-08-08_06970bb43ad3c40ee874a151fd42ba67_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 81KB
- Sample260809-ap4gnsxcjd
- SHA256 f2dbabff6793056a726c1d9d0ce88db1c42b5628944120a8bcac18db88bcea97
- MD5 06970bb43ad3c40ee874a151fd42ba67
- SHA1 8e128d34940e42c49f80a535408384346680caea
- SHA512 f5cd5df7711f34f17347376c8363e9f6d9e7fc5cb36ff659ee67ddb22ae806ec126c0ab9158c495da1aef3194a30f1e4d28e03e9c8cdc4c4b4135c74c6fb899a
- SSDEEP 1536:1E4ycMQw+5fPsCG+dY0jSXgCN90Wg05weUVWIbEu:1E0G+zjSXgCN9hg0VUHbT
- TLSH T1FE836C5273C484B3F83251780879C561575BBC6627A0068F3F8DB76E5EB23825EBA31B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_06970bb43ad3c40ee874a151fd42ba67_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_06970bb43ad3c40ee874a151fd42ba67_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_06970bb43ad3c40ee874a151fd42ba67_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 81KB
- SHA256 f2dbabff6793056a726c1d9d0ce88db1c42b5628944120a8bcac18db88bcea97
- MD5 06970bb43ad3c40ee874a151fd42ba67
- SHA1 8e128d34940e42c49f80a535408384346680caea
- SHA512 f5cd5df7711f34f17347376c8363e9f6d9e7fc5cb36ff659ee67ddb22ae806ec126c0ab9158c495da1aef3194a30f1e4d28e03e9c8cdc4c4b4135c74c6fb899a
- SSDEEP 1536:1E4ycMQw+5fPsCG+dY0jSXgCN90Wg05weUVWIbEu:1E0G+zjSXgCN9hg0VUHbT
- TLSH T1FE836C5273C484B3F83251780879C561575BBC6627A0068F3F8DB76E5EB23825EBA31B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.