General
- Target 2026-09-12_34a4269150b887e250fcf9e48991aa35_elex_redline-stealer_rhadamanthys_smoke-loader_tofsee
- Size 165KB
- Sample260913-ebrceatsdw
- SHA256 517196426e795a4471ac6b36b209f86a48c291b7c73c98f31f5bb4762dfc16fa
- MD5 34a4269150b887e250fcf9e48991aa35
- SHA1 dd5df9ac7d0e5105ebb9ac766cee782db9babac3
- SHA512 5ef4ceec3c87aac4a7892c7a5a56faf3016d30565b4434c5bc35fc8ea84b5fdabd4d207f7c9772bc3bccd744cd98267d22c54e6677b9322d15f3ab915df44a70
- SSDEEP 3072:JUu5AV9IzF4R+iA9aI6Ks2pWqSNg2Ew++bx:JUlIzFbi9I6KMHlEw3b
- TLSH T188F38D2716D4F036E3D312348A68E2B25A7D763509C5DA0BAB90422A3D71793F7B970F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-12_34a4269150b887e250fcf9e48991aa35_elex_redline-stealer_rhadamanthys_smoke-loader_tofsee.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-12_34a4269150b887e250fcf9e48991aa35_elex_redline-stealer_rhadamanthys_smoke-loader_tofsee
- Size 165KB
- SHA256 517196426e795a4471ac6b36b209f86a48c291b7c73c98f31f5bb4762dfc16fa
- MD5 34a4269150b887e250fcf9e48991aa35
- SHA1 dd5df9ac7d0e5105ebb9ac766cee782db9babac3
- SHA512 5ef4ceec3c87aac4a7892c7a5a56faf3016d30565b4434c5bc35fc8ea84b5fdabd4d207f7c9772bc3bccd744cd98267d22c54e6677b9322d15f3ab915df44a70
- SSDEEP 3072:JUu5AV9IzF4R+iA9aI6Ks2pWqSNg2Ew++bx:JUlIzFbi9I6KMHlEw3b
- TLSH T188F38D2716D4F036E3D312348A68E2B25A7D763509C5DA0BAB90422A3D71793F7B970F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.