General
- Target 2026-08-12_5e9aa1bb50c4e20773bad82c09b90520_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 73KB
- Sample260812-m36keafk2w
- SHA256 acb38024165a39c1ff721b1d5f4dfa4e8ad3ce9c25b0a4713b0fcc8ab7ac39de
- MD5 5e9aa1bb50c4e20773bad82c09b90520
- SHA1 c098d2064b84c0012a4be9af460d51b9e1808922
- SHA512 084b83db5ea8ce947ba331647e7d454ca269aa37d054a6e8522fbb696d699a33b0160cb8f6f78c1d90ed89c7688b4ee061be36eb1137ce4a2567d590ad7eec54
- SSDEEP 1536:Om1wCcyp4OH5/PNP4K1d+QXkSofXYVNy4D+jHJGhUXqBsUgTqx:H1sRK1d+QLofXYVNyYqHEUAsUT
- TLSH T194736D2277D48573FA33817448B9C691666ABC123AA1454F3E8DB70E4E733829DB631F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_5e9aa1bb50c4e20773bad82c09b90520_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_5e9aa1bb50c4e20773bad82c09b90520_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_5e9aa1bb50c4e20773bad82c09b90520_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 73KB
- SHA256 acb38024165a39c1ff721b1d5f4dfa4e8ad3ce9c25b0a4713b0fcc8ab7ac39de
- MD5 5e9aa1bb50c4e20773bad82c09b90520
- SHA1 c098d2064b84c0012a4be9af460d51b9e1808922
- SHA512 084b83db5ea8ce947ba331647e7d454ca269aa37d054a6e8522fbb696d699a33b0160cb8f6f78c1d90ed89c7688b4ee061be36eb1137ce4a2567d590ad7eec54
- SSDEEP 1536:Om1wCcyp4OH5/PNP4K1d+QXkSofXYVNy4D+jHJGhUXqBsUgTqx:H1sRK1d+QLofXYVNyYqHEUAsUT
- TLSH T194736D2277D48573FA33817448B9C691666ABC123AA1454F3E8DB70E4E733829DB631F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.