General
- Target 2026-08-30_f52a7d9c2e2367818fa78359ed257c93_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 94KB
- Sample260831-a2yf7abq91
- SHA256 3998c13343a6aee667d4b1a72bf31b0ed6188839530089ef7d0b703b570a5ace
- MD5 f52a7d9c2e2367818fa78359ed257c93
- SHA1 56617eaee4c13c27983237cbf035492bebc24555
- SHA512 291a3d92e6d4509e22456c747bc7cbbd4bb94aaddb5aa0ac0a76cf1fa02a6a9f5d0d0919a498ce5516996c9263a270a0a4123a8dfe4ff6586d12e829f6951127
- SSDEEP 1536:SP3DgM88ic7AIXw3Psvl+AfSofXGfN19D+2M2GAoUglcsddLtlQRHLSgT:GR8yl+jofXGfN1BnMJUpsddoT
- TLSH T16A93F635BBC54572F33796B489F681D2BA7AB8233911580F248A53490D33B52AEF271F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-30_f52a7d9c2e2367818fa78359ed257c93_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-30_f52a7d9c2e2367818fa78359ed257c93_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-30_f52a7d9c2e2367818fa78359ed257c93_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 94KB
- SHA256 3998c13343a6aee667d4b1a72bf31b0ed6188839530089ef7d0b703b570a5ace
- MD5 f52a7d9c2e2367818fa78359ed257c93
- SHA1 56617eaee4c13c27983237cbf035492bebc24555
- SHA512 291a3d92e6d4509e22456c747bc7cbbd4bb94aaddb5aa0ac0a76cf1fa02a6a9f5d0d0919a498ce5516996c9263a270a0a4123a8dfe4ff6586d12e829f6951127
- SSDEEP 1536:SP3DgM88ic7AIXw3Psvl+AfSofXGfN19D+2M2GAoUglcsddLtlQRHLSgT:GR8yl+jofXGfN1BnMJUpsddoT
- TLSH T16A93F635BBC54572F33796B489F681D2BA7AB8233911580F248A53490D33B52AEF271F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.