General
- Target 2026-08-25_8c3ce1b493b4b8cfa384f499414f538a_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 46.3MB
- Sample260826-wpcjvatdrc
- SHA256 5b166cf621fa4e005932e9ca0146e0b1d24564a619da5a525e1a16099c95b98b
- MD5 8c3ce1b493b4b8cfa384f499414f538a
- SHA1 0f51a3b26fc9bdbd7e8904cfca1c50995dfd4230
- SHA512 d0c8c2a45802921db3a777894ca6dd96e4d52d7d48554e52902308360a4b2cb8b5434123c3b693c11a6412ab57308904dd8c369d65f65757ee06fbcbf1d5f4b3
- SSDEEP 6144:VnJwVNKA9025tJxpbiqOdKRsfQA5mstxdy+STln0cn:nwVNV90oZpOqOdKRsMsrdy+k0M
- TLSH T14BB7BE2175F29135FFF78B355AB496A42A7BBC632B30418E35A4365F1E332E18A24713
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-25_8c3ce1b493b4b8cfa384f499414f538a_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
lumma
C2
-
https://bashfulacid.lat/api
-
https://tentabatte.lat/api
-
https://curverpluch.lat/api
-
https://talkynicer.lat/api
-
https://shapestickyr.lat/api
-
https://manyrestro.lat/api
-
https://slipperyloo.lat/api
-
https://wordyfindy.lat/api
-
https://dxkushha.com/api
Targets
-
- Target 2026-08-25_8c3ce1b493b4b8cfa384f499414f538a_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 46.3MB
- SHA256 5b166cf621fa4e005932e9ca0146e0b1d24564a619da5a525e1a16099c95b98b
- MD5 8c3ce1b493b4b8cfa384f499414f538a
- SHA1 0f51a3b26fc9bdbd7e8904cfca1c50995dfd4230
- SHA512 d0c8c2a45802921db3a777894ca6dd96e4d52d7d48554e52902308360a4b2cb8b5434123c3b693c11a6412ab57308904dd8c369d65f65757ee06fbcbf1d5f4b3
- SSDEEP 6144:VnJwVNKA9025tJxpbiqOdKRsfQA5mstxdy+STln0cn:nwVNV90oZpOqOdKRsMsrdy+k0M
- TLSH T14BB7BE2175F29135FFF78B355AB496A42A7BBC632B30418E35A4365F1E332E18A24713
- MD5 SHA1 SHA512 SSDEEP TLSH