General
- Target 2026-09-08_e901f035fb2c1cae2be194fd271623ef_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 69KB
- Sample260910-cd33watcre
- SHA256 a898f0aec4bfcc4fc0c7f44085a5df2c0455f0da7e86fb280b29b774d16e75d9
- MD5 e901f035fb2c1cae2be194fd271623ef
- SHA1 27db4fb202d56fee5cc4984388a49291c7566389
- SHA512 6e6f2d64abd2ccaca6bae5eb73091560dbd2ff504a5123846875c9848f624e2d7f18415b6823853e506e19315168e4cb3c8861681b289ffc90287e7d782aa601
- SSDEEP 1536:RXvoWc9AosuVXPnU7Vf+pLVS4X2MN9vPRbRCeUN9DbI:9b7Vf+fS4X2MN93RbnUrbI
- TLSH T188636C1277C4C973F933917408B9C562675ABC1227A0428F3E8E771E5EB23925DBA31B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-08_e901f035fb2c1cae2be194fd271623ef_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-08_e901f035fb2c1cae2be194fd271623ef_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-08_e901f035fb2c1cae2be194fd271623ef_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 69KB
- SHA256 a898f0aec4bfcc4fc0c7f44085a5df2c0455f0da7e86fb280b29b774d16e75d9
- MD5 e901f035fb2c1cae2be194fd271623ef
- SHA1 27db4fb202d56fee5cc4984388a49291c7566389
- SHA512 6e6f2d64abd2ccaca6bae5eb73091560dbd2ff504a5123846875c9848f624e2d7f18415b6823853e506e19315168e4cb3c8861681b289ffc90287e7d782aa601
- SSDEEP 1536:RXvoWc9AosuVXPnU7Vf+pLVS4X2MN9vPRbRCeUN9DbI:9b7Vf+fS4X2MN93RbnUrbI
- TLSH T188636C1277C4C973F933917408B9C562675ABC1227A0428F3E8E771E5EB23925DBA31B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.