General
- Target 2026-09-20_f12c00c92ef241973c8763ddcd5c7e25_elex_redline-stealer_rhadamanthys_smoke-loader_tofsee
- Size 165KB
- Sample260920-2ma6wsfk21
- SHA256 9d3a940ce6c61938d8eefa5c75db9a00cbed84f6098d9d3d25cef9c482f652a4
- MD5 f12c00c92ef241973c8763ddcd5c7e25
- SHA1 b553bf147e8f7c1a417d93620a9ec603f5f09cdb
- SHA512 e380ea5a9f4981ac13abbdf68c9e35b2dce6c35706b3cb91d7910a1db13aa664cda7c1c9cb45511b1be66f98ea0cedd6396f5ea46c5ca99525ea86dc40fee6d2
- SSDEEP 3072:JUu5AV9IzF4R+iA9aI6Ks2pWqSSg2Ew++bx:JUlIzFbi9I6KMHkEw3b
- TLSH T104F38D2716D4F032E39312348A68E2B25A7D763549C5DA0BAB90422A3D717D3F7B970F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-20_f12c00c92ef241973c8763ddcd5c7e25_elex_redline-stealer_rhadamanthys_smoke-loader_tofsee.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-20_f12c00c92ef241973c8763ddcd5c7e25_elex_redline-stealer_rhadamanthys_smoke-loader_tofsee
- Size 165KB
- SHA256 9d3a940ce6c61938d8eefa5c75db9a00cbed84f6098d9d3d25cef9c482f652a4
- MD5 f12c00c92ef241973c8763ddcd5c7e25
- SHA1 b553bf147e8f7c1a417d93620a9ec603f5f09cdb
- SHA512 e380ea5a9f4981ac13abbdf68c9e35b2dce6c35706b3cb91d7910a1db13aa664cda7c1c9cb45511b1be66f98ea0cedd6396f5ea46c5ca99525ea86dc40fee6d2
- SSDEEP 3072:JUu5AV9IzF4R+iA9aI6Ks2pWqSSg2Ew++bx:JUlIzFbi9I6KMHkEw3b
- TLSH T104F38D2716D4F032E39312348A68E2B25A7D763549C5DA0BAB90422A3D717D3F7B970F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.