General
- Target 2026-09-10_e2b08c27848d275954705b8d2385cc2f_amadey_elex_redline-stealer_rhadamanthys_rokrat_smoke-loader_stop_valleyrat
- Size 1.3MB
- Sample260910-lk825s1ejf
- SHA256 bbdb117c9cd459793f914fa692e2ad1c12caa94db81d82276f432b582b719e1a
- MD5 e2b08c27848d275954705b8d2385cc2f
- SHA1 6ddb1f776d9c9e4b1dec92131471b107dd176061
- SHA512 6d69cb9f555411b5d7d4d0742931229dc0d6e26f387179534828b66c68ce12495be8e6dd0beece51c7e28b5df29512a929279b685160eb4db36b2966837cb2f9
- SSDEEP 24576:AfuJGv2ns9XRkZfw5eujMDqMCR+iXfbLKi0wtFuX6pFPro:AfGGeWXm5/CR+SnFg2O
- TLSH T1D45512216D40A53AC47C4CFC40BF4AC54A39CE2C212D7982B7D46DDD6893798A7EB26B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-10_e2b08c27848d275954705b8d2385cc2f_amadey_elex_redline-stealer_rhadamanthys_rokrat_smoke-loader_stop_valleyrat.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-10_e2b08c27848d275954705b8d2385cc2f_amadey_elex_redline-stealer_rhadamanthys_rokrat_smoke-loader_stop_valleyrat
- Size 1.3MB
- SHA256 bbdb117c9cd459793f914fa692e2ad1c12caa94db81d82276f432b582b719e1a
- MD5 e2b08c27848d275954705b8d2385cc2f
- SHA1 6ddb1f776d9c9e4b1dec92131471b107dd176061
- SHA512 6d69cb9f555411b5d7d4d0742931229dc0d6e26f387179534828b66c68ce12495be8e6dd0beece51c7e28b5df29512a929279b685160eb4db36b2966837cb2f9
- SSDEEP 24576:AfuJGv2ns9XRkZfw5eujMDqMCR+iXfbLKi0wtFuX6pFPro:AfGGeWXm5/CR+SnFg2O
- TLSH T1D45512216D40A53AC47C4CFC40BF4AC54A39CE2C212D7982B7D46DDD6893798A7EB26B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects binaries and memory artifacts referencing sandbox DLLs typically observed in sandbox evasion
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.