General
- Target 2026-09-04_c3e8f8c598884a470e81a30f39387905_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 95KB
- Sample260904-18v8hsap81
- SHA256 22471ea2340160fdb99b5ca2db0b9e826eb49d8750311889c825933bfb2ee20f
- MD5 c3e8f8c598884a470e81a30f39387905
- SHA1 9496ff8c972d828d35d7672faaa561550acf7b83
- SHA512 23963c26cfa8a83ba2bb0864a6db6bf827a839013fb82444868a2d535eeb41d5c286b1383588d7d268e1c9203e622e96495430d1ae96a2f784b0f255922355d8
- SSDEEP 1536:SP3DgM88ic7AIXw3Psvl+AfSofXGfN19D+2M2GAoUglcsddLtlQRHLS62aDC:GR8yl+jofXGfN1BnMJUpsdd+e
- TLSH T1E093E6357BD54572F3378AB589F681D2BA7AB8233911580F248A53490C33B52AEF271F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_c3e8f8c598884a470e81a30f39387905_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-04_c3e8f8c598884a470e81a30f39387905_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_c3e8f8c598884a470e81a30f39387905_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 95KB
- SHA256 22471ea2340160fdb99b5ca2db0b9e826eb49d8750311889c825933bfb2ee20f
- MD5 c3e8f8c598884a470e81a30f39387905
- SHA1 9496ff8c972d828d35d7672faaa561550acf7b83
- SHA512 23963c26cfa8a83ba2bb0864a6db6bf827a839013fb82444868a2d535eeb41d5c286b1383588d7d268e1c9203e622e96495430d1ae96a2f784b0f255922355d8
- SSDEEP 1536:SP3DgM88ic7AIXw3Psvl+AfSofXGfN19D+2M2GAoUglcsddLtlQRHLS62aDC:GR8yl+jofXGfN1BnMJUpsdd+e
- TLSH T1E093E6357BD54572F3378AB589F681D2BA7AB8233911580F248A53490C33B52AEF271F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.