Overview

overview

10

Static

static

10

2026-08-21...er.exe

windows10-2004-x64

9

2026-08-21...er.exe

windows11-ltsc_2024-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target
    2026-08-21_f757faea7abfd2a8abbcc02276fed90c_amadey_elex_feodo_karagany_redline-stealer_rhadamanthys_smoke-loader
  • Size 96KB
  • Sample260821-pg389sbd49
  • SHA256 a1d8c2f36bd6adfd4e1d74308f517a32651d72e3d6b44eec287650fa514b4628
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
discoverypersistence

Malware Config

Targets

    • Target
      2026-08-21_f757faea7abfd2a8abbcc02276fed90c_amadey_elex_feodo_karagany_redline-stealer_rhadamanthys_smoke-loader
    • Size 96KB
    • SHA256 a1d8c2f36bd6adfd4e1d74308f517a32651d72e3d6b44eec287650fa514b4628
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    9/10
    discoverypersistence

    • Detects executables packed with aPLib.

    • Sets service image path in registry

      This determines the executable launched when a service starts. It can be used to establish persistence.

      persistence

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks