General
- Target 2026-09-16_c31a863dfaf2e5b5fb0f76f5db18ac36_elex_karagany_rhadamanthys_smoke-loader_stealc_stop_tofsee_vertexnet
- Size 143KB
- Sample260916-vv9wvs1zey
- SHA256 72c20363c490a0d4da5fa96bdb11d6e9a9cb3ce8de9265c9d7778701292a0e42
- MD5 c31a863dfaf2e5b5fb0f76f5db18ac36
- SHA1 7ba62fb2d7356ee166b7ef5b4daf51384284a923
- SHA512 03953d7c5f84a99ee6d6726b869d0efa999d2a976c81696f12b5f2a76469c60d0ed762658007df5f8ee17ded579b88aef58241f24c3d7aef832617878e2007e5
- SSDEEP 3072:RsD2ADkpFGkTXlDJA6ba2esDetNxVgbTGV9X4:RplzpTVDVa2en/V6Mp
- TLSH T16EE38C227AD0C032D06B11715AB9D7B69969FA33177484C7F3840FBD6E612E09B7E34A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-16_c31a863dfaf2e5b5fb0f76f5db18ac36_elex_karagany_rhadamanthys_smoke-loader_stealc_stop_tofsee_vertexnet.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-16_c31a863dfaf2e5b5fb0f76f5db18ac36_elex_karagany_rhadamanthys_smoke-loader_stealc_stop_tofsee_vertexnet.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
vertexnet
C2
-
rioselva.travel
Mutex
-
VN_MUTEX16
Attributes
-
C2Path
/login/
Targets
-
- Target 2026-09-16_c31a863dfaf2e5b5fb0f76f5db18ac36_elex_karagany_rhadamanthys_smoke-loader_stealc_stop_tofsee_vertexnet
- Size 143KB
- SHA256 72c20363c490a0d4da5fa96bdb11d6e9a9cb3ce8de9265c9d7778701292a0e42
- MD5 c31a863dfaf2e5b5fb0f76f5db18ac36
- SHA1 7ba62fb2d7356ee166b7ef5b4daf51384284a923
- SHA512 03953d7c5f84a99ee6d6726b869d0efa999d2a976c81696f12b5f2a76469c60d0ed762658007df5f8ee17ded579b88aef58241f24c3d7aef832617878e2007e5
- SSDEEP 3072:RsD2ADkpFGkTXlDJA6ba2esDetNxVgbTGV9X4:RplzpTVDVa2en/V6Mp
- TLSH T16EE38C227AD0C032D06B11715AB9D7B69969FA33177484C7F3840FBD6E612E09B7E34A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects VertexNET stealer
-
Executes dropped EXE
-
Adds Run key to start application