General
- Target 2026-08-21_78050dc9a688e3e9c78521b29c07d4e3_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 102.4MB
- Sample260822-phyeeaywdv
- SHA256 ce9345ac5cd5f07bb2a243fb5076014af64a773d90770d72ef5b2952bba7e442
- MD5 78050dc9a688e3e9c78521b29c07d4e3
- SHA1 4e7e1bddf32ece412cee3f7a543a666e1585c265
- SHA512 7462c2ea594c24b333e8a35c36ff3892f6561a15595cc516c1e30500658e69cc083770eb6f72d8b86049a0dc3ee7ce8565860d77ceeff21d7e6ed932a671ea81
- SSDEEP 6144:RAgvA/r+9SG5f19yL77jULQmlXXHZViI931+:RAgI/s519yL7O5J5ViI93I
- TLSH T1D038AE52B2F27821E7F78A319E39C6E86A3FB8F25E74525E12345E1B08712E1C563713
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-21_78050dc9a688e3e9c78521b29c07d4e3_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
lumma
C2
-
https://crib-endanger.sbs/api
-
https://faintbl0w.sbs/api
-
https://300snails.sbs/api
-
https://bored-light.sbs/api
-
https://3xc1aimbl0w.sbs/api
-
https://pull-trucker.sbs/api
-
https://fleez-inc.sbs/api
-
https://thicktoys.sbs/api
-
https://milk-of-horned.cyou/api
Targets
-
- Target 2026-08-21_78050dc9a688e3e9c78521b29c07d4e3_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 102.4MB
- SHA256 ce9345ac5cd5f07bb2a243fb5076014af64a773d90770d72ef5b2952bba7e442
- MD5 78050dc9a688e3e9c78521b29c07d4e3
- SHA1 4e7e1bddf32ece412cee3f7a543a666e1585c265
- SHA512 7462c2ea594c24b333e8a35c36ff3892f6561a15595cc516c1e30500658e69cc083770eb6f72d8b86049a0dc3ee7ce8565860d77ceeff21d7e6ed932a671ea81
- SSDEEP 6144:RAgvA/r+9SG5f19yL77jULQmlXXHZViI931+:RAgI/s519yL7O5J5ViI93I
- TLSH T1D038AE52B2F27821E7F78A319E39C6E86A3FB8F25E74525E12345E1B08712E1C563713
- MD5 SHA1 SHA512 SSDEEP TLSH