General
- Target 2026-09-09_e60cd805fc5bb31252b4ece67613e71d_elex_redline-stealer_rhadamanthys_smoke-loader_tofsee
- Size 165KB
- Sample260909-mcvefsvbqe
- SHA256 3c727a3391ed00d7c5327f27b1fa2cdb0043a22c7d9e74bebe8a7acec2240cf7
- MD5 e60cd805fc5bb31252b4ece67613e71d
- SHA1 3a00170121d7a46be17e716d4d57f97839c396eb
- SHA512 c47883b13f81dc4924cdc7ead5948e56d623819f91679ab5038682cd37ea26ba3faa23b8a8bc4ec8743d742be525c0ea15091f5f57fe9a9e8f1759f0b10494d9
- SSDEEP 3072:FUu5AV9IzF4R+iA9aI6Ks2pWqSa1g2Ew++bx:FUlIzFbi9I6KMHatEw3b
- TLSH T1BCF38D2716D4F032E39312348A68E2B25A7D763509C5DE0BAB90422A3D71793F7B970F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-09_e60cd805fc5bb31252b4ece67613e71d_elex_redline-stealer_rhadamanthys_smoke-loader_tofsee.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-09_e60cd805fc5bb31252b4ece67613e71d_elex_redline-stealer_rhadamanthys_smoke-loader_tofsee
- Size 165KB
- SHA256 3c727a3391ed00d7c5327f27b1fa2cdb0043a22c7d9e74bebe8a7acec2240cf7
- MD5 e60cd805fc5bb31252b4ece67613e71d
- SHA1 3a00170121d7a46be17e716d4d57f97839c396eb
- SHA512 c47883b13f81dc4924cdc7ead5948e56d623819f91679ab5038682cd37ea26ba3faa23b8a8bc4ec8743d742be525c0ea15091f5f57fe9a9e8f1759f0b10494d9
- SSDEEP 3072:FUu5AV9IzF4R+iA9aI6Ks2pWqSa1g2Ew++bx:FUlIzFbi9I6KMHatEw3b
- TLSH T1BCF38D2716D4F032E39312348A68E2B25A7D763509C5DE0BAB90422A3D71793F7B970F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.