General
- Target 2026-08-09_230c4e892b7ec9c8ee427c242a8a50e9_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 81KB
- Sample260809-essxkazfjc
- SHA256 93bad3e44c85356d6662ee1ddf758d0a9d64e98e36cddaae860730ab16e361ed
- MD5 230c4e892b7ec9c8ee427c242a8a50e9
- SHA1 9515edb303e20cb18e1da55e6a4ff7f28cc10a03
- SHA512 9a7927668a9aa352924647fe9da927ad26bcd65c7b8e961acd94a068f14adeaf4783b819505487db1df676ced6c127ef287a57a74be880e1e2ac2cf896771687
- SSDEEP 1536:1E4ycMQw+5fPsCG+dY0jSXgCN90Wg05weUVWIbE2:1E0G+zjSXgCN9hg0VUHbL
- TLSH T193836C5277C484B3F83241740879C561675BBC6627A0068F3F8DB76E5EB23825EBA31B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_230c4e892b7ec9c8ee427c242a8a50e9_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_230c4e892b7ec9c8ee427c242a8a50e9_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_230c4e892b7ec9c8ee427c242a8a50e9_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 81KB
- SHA256 93bad3e44c85356d6662ee1ddf758d0a9d64e98e36cddaae860730ab16e361ed
- MD5 230c4e892b7ec9c8ee427c242a8a50e9
- SHA1 9515edb303e20cb18e1da55e6a4ff7f28cc10a03
- SHA512 9a7927668a9aa352924647fe9da927ad26bcd65c7b8e961acd94a068f14adeaf4783b819505487db1df676ced6c127ef287a57a74be880e1e2ac2cf896771687
- SSDEEP 1536:1E4ycMQw+5fPsCG+dY0jSXgCN90Wg05weUVWIbE2:1E0G+zjSXgCN9hg0VUHbL
- TLSH T193836C5277C484B3F83241740879C561675BBC6627A0068F3F8DB76E5EB23825EBA31B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.