General
- Target 2026-08-09_1d08b59636e60c121cc35408174dcc1c_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 81KB
- Sample260809-k8qp2acn2y
- SHA256 97b1cccb2bedcab1c168e717547cc032f5404f9b49d46a738a76e81430843452
- MD5 1d08b59636e60c121cc35408174dcc1c
- SHA1 47141adecfe275305f0fe196f12e64b1f0f9a903
- SHA512 2be03c5fb972069a0f6b8f603d46146f73391ab4b3d95ba0c66613927233bc4eecbbcc9cd7d3cda8647aa3a2d58d90c3bc9ccc85584399e3a1925198557af380
- SSDEEP 1536:1E4ycMQw+5fPsCG+dY0jSXgCN90Wg05weUVWIbE9:1E0G+zjSXgCN9hg0VUHb8
- TLSH T187836C5277C484B3F83241740879C561675BBC6627A0068F3F8DB76E5EB23825EBA31B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_1d08b59636e60c121cc35408174dcc1c_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_1d08b59636e60c121cc35408174dcc1c_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_1d08b59636e60c121cc35408174dcc1c_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 81KB
- SHA256 97b1cccb2bedcab1c168e717547cc032f5404f9b49d46a738a76e81430843452
- MD5 1d08b59636e60c121cc35408174dcc1c
- SHA1 47141adecfe275305f0fe196f12e64b1f0f9a903
- SHA512 2be03c5fb972069a0f6b8f603d46146f73391ab4b3d95ba0c66613927233bc4eecbbcc9cd7d3cda8647aa3a2d58d90c3bc9ccc85584399e3a1925198557af380
- SSDEEP 1536:1E4ycMQw+5fPsCG+dY0jSXgCN90Wg05weUVWIbE9:1E0G+zjSXgCN9hg0VUHb8
- TLSH T187836C5277C484B3F83241740879C561675BBC6627A0068F3F8DB76E5EB23825EBA31B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.