General
- Target 2026-09-04_041ce4855866847aa68f6f835c80119c_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 95KB
- Sample260905-ychlfaff62
- SHA256 40b64efa8929e8ef80980426755fe4e9c8610582971dc4e540b6afea98166dcc
- MD5 041ce4855866847aa68f6f835c80119c
- SHA1 86a7f30f1ae0759474f1c05b69903624f3775512
- SHA512 26d1d7f47a657fb93f5346c64104c14e0fa6e6a82c9a2cd2c470f08dcac22781d6f4cd755707ad46c5cd331b40affcb29b5469d7841c5da4098e4c5c4ee5767e
- SSDEEP 1536:SP3DgM88ic7AIXw3Psvl+AfSofXGfN19D+2M2GAoUglcsddLtlQRHLS62aDz:GR8yl+jofXGfN1BnMJUpsdd+X
- TLSH T16A93E6357BD54572F3378AB589F681D2BA7AB8233911580F248A53490C33B52AEF271F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_041ce4855866847aa68f6f835c80119c_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-04_041ce4855866847aa68f6f835c80119c_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260710-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_041ce4855866847aa68f6f835c80119c_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 95KB
- SHA256 40b64efa8929e8ef80980426755fe4e9c8610582971dc4e540b6afea98166dcc
- MD5 041ce4855866847aa68f6f835c80119c
- SHA1 86a7f30f1ae0759474f1c05b69903624f3775512
- SHA512 26d1d7f47a657fb93f5346c64104c14e0fa6e6a82c9a2cd2c470f08dcac22781d6f4cd755707ad46c5cd331b40affcb29b5469d7841c5da4098e4c5c4ee5767e
- SSDEEP 1536:SP3DgM88ic7AIXw3Psvl+AfSofXGfN19D+2M2GAoUglcsddLtlQRHLS62aDz:GR8yl+jofXGfN1BnMJUpsdd+X
- TLSH T16A93E6357BD54572F3378AB589F681D2BA7AB8233911580F248A53490C33B52AEF271F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.