General
- Target 2026-08-19_2434285e6dca1f105d49308795466154_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 94KB
- Sample260819-kknkrssvg1
- SHA256 dc02c959db2913107e00cbe9cab5137210b940331fc23f764e9ed3d0fc0ec438
- MD5 2434285e6dca1f105d49308795466154
- SHA1 d86b6efe9cdb8fb9c0939903ab329898a1300029
- SHA512 9e002b814d0108c1b2ce0dcdb12cd1651e9e49e717a627189ac5369a15ce883c2df008dce71cece975b6621157e25fed52c5b43f78ab74e81bd6f8b3950c53e0
- SSDEEP 1536:SP3DgM88ic7AIXw3Psvl+AfSofXGfN19D+2M2GAoUglcsddLtlQRHLS62aDV:GR8yl+jofXGfN1BnMJUpsdd+x
- TLSH T13993F6357BD54572F33786B589F681D2BA7AB8233911580F248A53490C33B92AEF271F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_2434285e6dca1f105d49308795466154_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_2434285e6dca1f105d49308795466154_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_2434285e6dca1f105d49308795466154_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 94KB
- SHA256 dc02c959db2913107e00cbe9cab5137210b940331fc23f764e9ed3d0fc0ec438
- MD5 2434285e6dca1f105d49308795466154
- SHA1 d86b6efe9cdb8fb9c0939903ab329898a1300029
- SHA512 9e002b814d0108c1b2ce0dcdb12cd1651e9e49e717a627189ac5369a15ce883c2df008dce71cece975b6621157e25fed52c5b43f78ab74e81bd6f8b3950c53e0
- SSDEEP 1536:SP3DgM88ic7AIXw3Psvl+AfSofXGfN19D+2M2GAoUglcsddLtlQRHLS62aDV:GR8yl+jofXGfN1BnMJUpsdd+x
- TLSH T13993F6357BD54572F33786B589F681D2BA7AB8233911580F248A53490C33B92AEF271F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.