General
- Target 2026-09-30_c0ef94225116a8f09c45a4f2c8f211c5_amadey_elex_rhadamanthys_smoke-loader_stop
- Size 494KB
- Sample260930-jykwcsxt2q
- SHA256 b3c046d2bc27f2cc449f7019445756b4a1da4cfc76fa9f8a1d729348172169e1
- MD5 c0ef94225116a8f09c45a4f2c8f211c5
- SHA1 601dc534f03a2862ce4d59fa7edc40dff2a1581f
- SHA512 6629cbce42844332bfc828772ceaca45fcd943dbea242ddb82e4ba98381de6709536ae7f1fe32841b730a1109605125d3a2f3b757acb6d2ee8537f18079f66d5
- SSDEEP 12288:DZhUnRtCUXZbnfg1m6mXHln7+JT3onKGB+XARfhCJNrM:DvERj1D62Hh445bDSN
- TLSH T1BFB4E120A7A0C038E5F712F959F893A8B52D7DB14B3051CBA2E626FE52347E49C31767
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-30_c0ef94225116a8f09c45a4f2c8f211c5_amadey_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
raccoon
Version
-
1.8.1
Botnet
-
a8a04412b0db5dca0e2f7ee3c6455e08fdf3f698
Attributes
-
url4cnc
https://telete.in/h_electricryptors2
rc4.plain
rc4.plain
Targets
-
- Target 2026-09-30_c0ef94225116a8f09c45a4f2c8f211c5_amadey_elex_rhadamanthys_smoke-loader_stop
- Size 494KB
- SHA256 b3c046d2bc27f2cc449f7019445756b4a1da4cfc76fa9f8a1d729348172169e1
- MD5 c0ef94225116a8f09c45a4f2c8f211c5
- SHA1 601dc534f03a2862ce4d59fa7edc40dff2a1581f
- SHA512 6629cbce42844332bfc828772ceaca45fcd943dbea242ddb82e4ba98381de6709536ae7f1fe32841b730a1109605125d3a2f3b757acb6d2ee8537f18079f66d5
- SSDEEP 12288:DZhUnRtCUXZbnfg1m6mXHln7+JT3onKGB+XARfhCJNrM:DvERj1D62Hh445bDSN
- TLSH T1BFB4E120A7A0C038E5F712F959F893A8B52D7DB14B3051CBA2E626FE52347E49C31767
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Raccoon Stealer V1 payload
-
Detects executables referencing many email and collaboration clients. Observed in information steale