General
- Target 2026-09-27_8dedec97be54f1b0a99060eb3fdd73ec_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 69KB
- Sample260928-dm7m4avvbv
- SHA256 941e5e19015168dd78f7a1abeb27c346bb2a5599ff301959c0668adff2499de4
- MD5 8dedec97be54f1b0a99060eb3fdd73ec
- SHA1 eec7efceba5c3207e5d7fe9af1263d2b5d77c67c
- SHA512 72c281359e516361fd4f333dd0e0a86d33947efba743d93dfcf3960c8baa16fbcee8f5eee752090b0792ef86d893728094e2c8c4a2372b7f5e47ba7570195a17
- SSDEEP 1536:kYuWZcSAo2ZXPCP6X+lICL5pX4AN+XWjKELEUGua1Qj:krJX+f5pX4AN+mjKbUu18
- TLSH T1A3635B1273C4C5B2F83341744879D661675BBC1627A1428F3E8D7B6E5EB23824ABB31B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-27_8dedec97be54f1b0a99060eb3fdd73ec_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-27_8dedec97be54f1b0a99060eb3fdd73ec_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-27_8dedec97be54f1b0a99060eb3fdd73ec_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 69KB
- SHA256 941e5e19015168dd78f7a1abeb27c346bb2a5599ff301959c0668adff2499de4
- MD5 8dedec97be54f1b0a99060eb3fdd73ec
- SHA1 eec7efceba5c3207e5d7fe9af1263d2b5d77c67c
- SHA512 72c281359e516361fd4f333dd0e0a86d33947efba743d93dfcf3960c8baa16fbcee8f5eee752090b0792ef86d893728094e2c8c4a2372b7f5e47ba7570195a17
- SSDEEP 1536:kYuWZcSAo2ZXPCP6X+lICL5pX4AN+XWjKELEUGua1Qj:krJX+f5pX4AN+mjKbUu18
- TLSH T1A3635B1273C4C5B2F83341744879D661675BBC1627A1428F3E8D7B6E5EB23824ABB31B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.