General
- Target 2026-09-12_21d8d0aa9dcce20fa6e2da0c62044244_amadey_elex_karagany_manuscrypt_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 1.1MB
- Sample260913-ftft3acn8w
- SHA256 47f86282abc0fb8468b2398629977962ded36b83e27f8ad59fd17c57bfe3089c
- MD5 21d8d0aa9dcce20fa6e2da0c62044244
- SHA1 80b53f603d882cb8af71e547433496514d7a54b6
- SHA512 a0139c379aec050037c400b8143d2181b1fd7aba9cedda69801b84919c1570ad2a3dd20113fb964dac391e08c6405bec66ea7843e2cf87337b4350473faafc93
- SSDEEP 24576:d20HwwgO73ZaYxx4JzhnQABxnbYX9pmyf5Kcl:LwMpak4ZhQgwXf5/
- TLSH T12745A2B09866693FE37BDB3BC46A79358A1537B3BB93A5CF1030359105722C2AF4611E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-12_21d8d0aa9dcce20fa6e2da0c62044244_amadey_elex_karagany_manuscrypt_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-12_21d8d0aa9dcce20fa6e2da0c62044244_amadey_elex_karagany_manuscrypt_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260911-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-12_21d8d0aa9dcce20fa6e2da0c62044244_amadey_elex_karagany_manuscrypt_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 1.1MB
- SHA256 47f86282abc0fb8468b2398629977962ded36b83e27f8ad59fd17c57bfe3089c
- MD5 21d8d0aa9dcce20fa6e2da0c62044244
- SHA1 80b53f603d882cb8af71e547433496514d7a54b6
- SHA512 a0139c379aec050037c400b8143d2181b1fd7aba9cedda69801b84919c1570ad2a3dd20113fb964dac391e08c6405bec66ea7843e2cf87337b4350473faafc93
- SSDEEP 24576:d20HwwgO73ZaYxx4JzhnQABxnbYX9pmyf5Kcl:LwMpak4ZhQgwXf5/
- TLSH T12745A2B09866693FE37BDB3BC46A79358A1537B3BB93A5CF1030359105722C2AF4611E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.