General
- Target 2026-09-08_f09c938f9140c2ab9c1b2bae4a1c6492_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 94KB
- Sample260910-b69kpacm4x
- SHA256 960e5ecd0df90693be2e49ec41a13cd018cdefb50fe544951b02963eaa22aead
- MD5 f09c938f9140c2ab9c1b2bae4a1c6492
- SHA1 461079b0f329ca62cb2a46df173a311b12b70aba
- SHA512 dbe561d848c17be732f5486004621deb27eee1307580617b78dc3173bab93dbc07efcbed12142d82afe27fa4ed218320dc761a3906be1549d79c2ab9ce4be84c
- SSDEEP 1536:SP3DgM88ic7AIXw3Psvl+AfSofXGfN19D+2M2GAoUglcsddLtlQRHLS62aDE:GR8yl+jofXGfN1BnMJUpsdd+A
- TLSH T19193F6357BD54572F33786B589F681D2BA7AB8233911580F248A53490C33B92AEF271F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-08_f09c938f9140c2ab9c1b2bae4a1c6492_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-08_f09c938f9140c2ab9c1b2bae4a1c6492_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-08_f09c938f9140c2ab9c1b2bae4a1c6492_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 94KB
- SHA256 960e5ecd0df90693be2e49ec41a13cd018cdefb50fe544951b02963eaa22aead
- MD5 f09c938f9140c2ab9c1b2bae4a1c6492
- SHA1 461079b0f329ca62cb2a46df173a311b12b70aba
- SHA512 dbe561d848c17be732f5486004621deb27eee1307580617b78dc3173bab93dbc07efcbed12142d82afe27fa4ed218320dc761a3906be1549d79c2ab9ce4be84c
- SSDEEP 1536:SP3DgM88ic7AIXw3Psvl+AfSofXGfN19D+2M2GAoUglcsddLtlQRHLS62aDE:GR8yl+jofXGfN1BnMJUpsdd+A
- TLSH T19193F6357BD54572F33786B589F681D2BA7AB8233911580F248A53490C33B92AEF271F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.