General
- Target 2026-08-19_2886cd7cf3e67f6115482acb725dd346_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 93KB
- Sample260820-awb11axanf
- SHA256 1e9c5e2fb52da135a9ea9439ceabb79fa474d4a935fde1fcf4984dfdc3a3ed6c
- MD5 2886cd7cf3e67f6115482acb725dd346
- SHA1 58d02c4b4ce2a56a2b9dd34f7d91fcf41b735729
- SHA512 88f912ca78167bb3ba1904b906acc8d0b47bf32a95faef8c89a8415ae885e79609354c5728584fba60b99ef3af39361a430df4221f32ee8c2d023a58056997ef
- SSDEEP 1536:SP3DgM88ic7AIXw3Psvl+AfSofXGfN19D+2M2GAoUglcsddLtlQRHLSgm:GR8yl+jofXGfN1BnMJUpsddom
- TLSH T1E193F735BBC54572F337967489F681D2BA7AB8233911580F248A53490D33B92AEF271F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_2886cd7cf3e67f6115482acb725dd346_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_2886cd7cf3e67f6115482acb725dd346_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_2886cd7cf3e67f6115482acb725dd346_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 93KB
- SHA256 1e9c5e2fb52da135a9ea9439ceabb79fa474d4a935fde1fcf4984dfdc3a3ed6c
- MD5 2886cd7cf3e67f6115482acb725dd346
- SHA1 58d02c4b4ce2a56a2b9dd34f7d91fcf41b735729
- SHA512 88f912ca78167bb3ba1904b906acc8d0b47bf32a95faef8c89a8415ae885e79609354c5728584fba60b99ef3af39361a430df4221f32ee8c2d023a58056997ef
- SSDEEP 1536:SP3DgM88ic7AIXw3Psvl+AfSofXGfN19D+2M2GAoUglcsddLtlQRHLSgm:GR8yl+jofXGfN1BnMJUpsddom
- TLSH T1E193F735BBC54572F337967489F681D2BA7AB8233911580F248A53490D33B92AEF271F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.