General
- Target 2026-09-08_442b6ef6148acf457400fceced143d4f_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 94KB
- Sample260910-gvtb8ayhrc
- SHA256 d16cbfed7223bd33972136c679ab2f425b284a428f590da71afda98f36a8f4b4
- MD5 442b6ef6148acf457400fceced143d4f
- SHA1 dc3aaca0fd78cc838dbce5ee83b3e02775a5ead0
- SHA512 1acdeb81d1b46dfda651c58713d02423c304acfd144749f9a9742f51a8d5065f81934c5a81aa340969cf09474b1a7c0eaa58e404270a6eeb9ceb31b1b22eb8cd
- SSDEEP 1536:SP3DgM88ic7AIXw3Psvl+AfSofXGfN19D+2M2GAoUglcsddLtlQRHLS62aD1:GR8yl+jofXGfN1BnMJUpsdd+h
- TLSH T12893F6357BD54572F33786B589F681D2BA7AB8233911580F248A53490C33B92AEF271F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-08_442b6ef6148acf457400fceced143d4f_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-08_442b6ef6148acf457400fceced143d4f_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-08_442b6ef6148acf457400fceced143d4f_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 94KB
- SHA256 d16cbfed7223bd33972136c679ab2f425b284a428f590da71afda98f36a8f4b4
- MD5 442b6ef6148acf457400fceced143d4f
- SHA1 dc3aaca0fd78cc838dbce5ee83b3e02775a5ead0
- SHA512 1acdeb81d1b46dfda651c58713d02423c304acfd144749f9a9742f51a8d5065f81934c5a81aa340969cf09474b1a7c0eaa58e404270a6eeb9ceb31b1b22eb8cd
- SSDEEP 1536:SP3DgM88ic7AIXw3Psvl+AfSofXGfN19D+2M2GAoUglcsddLtlQRHLS62aD1:GR8yl+jofXGfN1BnMJUpsdd+h
- TLSH T12893F6357BD54572F33786B589F681D2BA7AB8233911580F248A53490C33B92AEF271F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.