General
- Target 2026-09-03_9ba4ac7e5218e33069edcdab551bb656_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 95KB
- Sample260905-2gnj2aterg
- SHA256 78b76d2ab3ceb41fe8b74058b18d62dd44c891ed8f4cf00e420ac9da8dc71df8
- MD5 9ba4ac7e5218e33069edcdab551bb656
- SHA1 a64ab35f934c210b117423caaee3fc80228afa1e
- SHA512 3287c5a776ad1ee1fd734f338ba9d53087f393c886fe71b2575ae4976081738cbdea570585285a19f465cd27661157d0d953947bfacf2925c457ecc9ad7f3aec
- SSDEEP 1536:SP3DgM88ic7AIXw3Psvl+AfSofXGfN19D+2M2GAoUglcsddLtlQRHLS62aDP:GR8yl+jofXGfN1BnMJUpsdd+7
- TLSH T18993E6357BD54572F33786B589F681D2BA7AB8233911580F248A53490C33B92AEF261F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-03_9ba4ac7e5218e33069edcdab551bb656_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-03_9ba4ac7e5218e33069edcdab551bb656_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-03_9ba4ac7e5218e33069edcdab551bb656_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 95KB
- SHA256 78b76d2ab3ceb41fe8b74058b18d62dd44c891ed8f4cf00e420ac9da8dc71df8
- MD5 9ba4ac7e5218e33069edcdab551bb656
- SHA1 a64ab35f934c210b117423caaee3fc80228afa1e
- SHA512 3287c5a776ad1ee1fd734f338ba9d53087f393c886fe71b2575ae4976081738cbdea570585285a19f465cd27661157d0d953947bfacf2925c457ecc9ad7f3aec
- SSDEEP 1536:SP3DgM88ic7AIXw3Psvl+AfSofXGfN19D+2M2GAoUglcsddLtlQRHLS62aDP:GR8yl+jofXGfN1BnMJUpsdd+7
- TLSH T18993E6357BD54572F33786B589F681D2BA7AB8233911580F248A53490C33B92AEF261F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.