General
- Target 2026-08-19_ec59ff50eeca9d3aa6718f2bbf83ebba_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 94KB
- Sample260819-mrxhcsed47
- SHA256 4946471571b9ffedb7a77046292fc92bdc11e11065c2dff0c2233772f8ff7673
- MD5 ec59ff50eeca9d3aa6718f2bbf83ebba
- SHA1 b41bcd3230e10c7bc1763541cd3b4f4d25df9893
- SHA512 15bb99b905d4d412a09e76ac65672f2748fac162310e69b0fee7877b5b0378b95b6b84ec8883f3a270c96743fa404e58d5be58e4bb1a5b185e71200f501d3a55
- SSDEEP 1536:SP3DgM88ic7AIXw3Psvl+AfSofXGfN19D+2M2GAoUglcsddLtlQRHLS62aD8:GR8yl+jofXGfN1BnMJUpsdd+o
- TLSH T19393F6357BD54572F33786B589F681D2BA7AB8233911580F248A53490C33B92AEF271F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_ec59ff50eeca9d3aa6718f2bbf83ebba_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_ec59ff50eeca9d3aa6718f2bbf83ebba_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_ec59ff50eeca9d3aa6718f2bbf83ebba_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 94KB
- SHA256 4946471571b9ffedb7a77046292fc92bdc11e11065c2dff0c2233772f8ff7673
- MD5 ec59ff50eeca9d3aa6718f2bbf83ebba
- SHA1 b41bcd3230e10c7bc1763541cd3b4f4d25df9893
- SHA512 15bb99b905d4d412a09e76ac65672f2748fac162310e69b0fee7877b5b0378b95b6b84ec8883f3a270c96743fa404e58d5be58e4bb1a5b185e71200f501d3a55
- SSDEEP 1536:SP3DgM88ic7AIXw3Psvl+AfSofXGfN19D+2M2GAoUglcsddLtlQRHLS62aD8:GR8yl+jofXGfN1BnMJUpsdd+o
- TLSH T19393F6357BD54572F33786B589F681D2BA7AB8233911580F248A53490C33B92AEF271F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.