General
- Target 2026-09-28_06d5f60568c8787feb88b70fc694c301_amadey_elex_karagany_manuscrypt_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 1.1MB
- Sample260929-pfqlsazzdv
- SHA256 42b6752481bd3966b2cb2d00d8a0ec3a8a558f57ee5ec4e103da07679d8b07cf
- MD5 06d5f60568c8787feb88b70fc694c301
- SHA1 3ffb2fcacddcc821bff68d53f443c362974effa7
- SHA512 a19f6fa1659332bfd8f79b0d2b9523a7a88f9768d20cbcfefbf277d1a3e7f43d911e3173136558503f3697b97758fdd36a5c4c83d425624f80da6abed0ca4831
- SSDEEP 12288:CSTrZ2A0UaI02sEHiteL8YGGJk/KG1w/FI2UeflSFg5mWhjaB7YkPDZV:d2FI0pgIYGQkyG1u6g5mYOB7YkPDZV
- TLSH T1B345B2B09925693FF37BCB3B88AA79258A1537B3BF53A1DB543435D00572282AF0750E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-28_06d5f60568c8787feb88b70fc694c301_amadey_elex_karagany_manuscrypt_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-28_06d5f60568c8787feb88b70fc694c301_amadey_elex_karagany_manuscrypt_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260911-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-28_06d5f60568c8787feb88b70fc694c301_amadey_elex_karagany_manuscrypt_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 1.1MB
- SHA256 42b6752481bd3966b2cb2d00d8a0ec3a8a558f57ee5ec4e103da07679d8b07cf
- MD5 06d5f60568c8787feb88b70fc694c301
- SHA1 3ffb2fcacddcc821bff68d53f443c362974effa7
- SHA512 a19f6fa1659332bfd8f79b0d2b9523a7a88f9768d20cbcfefbf277d1a3e7f43d911e3173136558503f3697b97758fdd36a5c4c83d425624f80da6abed0ca4831
- SSDEEP 12288:CSTrZ2A0UaI02sEHiteL8YGGJk/KG1w/FI2UeflSFg5mWhjaB7YkPDZV:d2FI0pgIYGQkyG1u6g5mYOB7YkPDZV
- TLSH T1B345B2B09925693FF37BCB3B88AA79258A1537B3BF53A1DB543435D00572282AF0750E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.