General
- Target 2026-09-06_d3ec884e4d23c1b2386d426ea9720289_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 96KB
- Sample260906-vq21fscc44
- SHA256 4657295ee66ae99dca70186491ca4ff537575e483d2a39de95dec1fa82897354
- MD5 d3ec884e4d23c1b2386d426ea9720289
- SHA1 a5b2fe18b66d85c01c6219930f34a6d1c0d17c39
- SHA512 1b622f4006ae7732dc69ad9368301111ef6b87f0f8fac5769d5d8c245923fea4656181f68d82c4a27dd99ab4ad9ecada1391c63c03b6e53124bcc8fa711067a6
- SSDEEP 1536:SP3DgM88ic7AIXw3Psvl+AfSofXGfN19D+2M2GAoUglcsddLtlQRHLSgRhrG:GR8yl+jofXGfN1BnMJUpsddoa
- TLSH T1F7A3D6397BC54572F377C6B589F681D2BA6AB8233911580F248A53490C33B53AEF261F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-06_d3ec884e4d23c1b2386d426ea9720289_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-06_d3ec884e4d23c1b2386d426ea9720289_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260710-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-06_d3ec884e4d23c1b2386d426ea9720289_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 96KB
- SHA256 4657295ee66ae99dca70186491ca4ff537575e483d2a39de95dec1fa82897354
- MD5 d3ec884e4d23c1b2386d426ea9720289
- SHA1 a5b2fe18b66d85c01c6219930f34a6d1c0d17c39
- SHA512 1b622f4006ae7732dc69ad9368301111ef6b87f0f8fac5769d5d8c245923fea4656181f68d82c4a27dd99ab4ad9ecada1391c63c03b6e53124bcc8fa711067a6
- SSDEEP 1536:SP3DgM88ic7AIXw3Psvl+AfSofXGfN19D+2M2GAoUglcsddLtlQRHLSgRhrG:GR8yl+jofXGfN1BnMJUpsddoa
- TLSH T1F7A3D6397BC54572F377C6B589F681D2BA6AB8233911580F248A53490C33B53AEF261F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.