General
- Target 2026-08-21_4874b0e75f1dd93c476144690681e70e_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 93KB
- Sample260822-s5fdwshp2v
- SHA256 f3beb4ec86491cd3987d23d0b1d717b5bd5764a313568d3e80abaff601c0da61
- MD5 4874b0e75f1dd93c476144690681e70e
- SHA1 cd3030adbcaabc1457854ba7dc177485c9ac7d5c
- SHA512 9df3f8edbb5701610f38ec424b3510ec42bb27d764ad403207057335aa14b7972de3993bc8749036d967c4729076506c8a90a450c8a896f219fa87e2924cdb15
- SSDEEP 1536:SP3DgM88ic7AIXw3Psvl+AfSofXGfN19D+2M2GAoUglcsddLtlQRHLSgi:GR8yl+jofXGfN1BnMJUpsddoi
- TLSH T1A993F735BBC54572F33796B489F681D2BA7AB8233911580F248A53490D33B52AEF271F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-21_4874b0e75f1dd93c476144690681e70e_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_4874b0e75f1dd93c476144690681e70e_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_4874b0e75f1dd93c476144690681e70e_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 93KB
- SHA256 f3beb4ec86491cd3987d23d0b1d717b5bd5764a313568d3e80abaff601c0da61
- MD5 4874b0e75f1dd93c476144690681e70e
- SHA1 cd3030adbcaabc1457854ba7dc177485c9ac7d5c
- SHA512 9df3f8edbb5701610f38ec424b3510ec42bb27d764ad403207057335aa14b7972de3993bc8749036d967c4729076506c8a90a450c8a896f219fa87e2924cdb15
- SSDEEP 1536:SP3DgM88ic7AIXw3Psvl+AfSofXGfN19D+2M2GAoUglcsddLtlQRHLSgi:GR8yl+jofXGfN1BnMJUpsddoi
- TLSH T1A993F735BBC54572F33796B489F681D2BA7AB8233911580F248A53490D33B52AEF271F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.