General
- Target 2026-09-30_7e2ce94600ecf0c8e73aa31b292fa601_amadey_elex_rhadamanthys_smoke-loader_stop
- Size 527KB
- Sample260930-l68y9syepc
- SHA256 0915217f01052ac6240cf3656931da818b2dc984e5842c4cda668124dac93374
- MD5 7e2ce94600ecf0c8e73aa31b292fa601
- SHA1 a235d3e5c6cd8e8217b077ff605362a00353bcab
- SHA512 1a9d648b535dbab5d96310c49646ce5c69d16fad94ecbb3a688d9548781d256364cc46db2c75a27364e3facdf63ef1dab1b19097e067b76898768d8ee3205928
- SSDEEP 12288:SUy2s8EYLsvZlqVYUWtPuwopNgIIWlWxKet4:c2smLUOxNJpWxKA4
- TLSH T1A9B4D030E6A0C035E5B711FC89B683B8A93E7E716B34D1CF52912AEE56B46E49C30753
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-30_7e2ce94600ecf0c8e73aa31b292fa601_amadey_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
raccoon
Version
-
1.8.1
Botnet
-
3a0693aace391ad57b292defd202847793de4c76
Attributes
-
url4cnc
https://telete.in/agrybirdsgamerept
rc4.plain
rc4.plain
Targets
-
- Target 2026-09-30_7e2ce94600ecf0c8e73aa31b292fa601_amadey_elex_rhadamanthys_smoke-loader_stop
- Size 527KB
- SHA256 0915217f01052ac6240cf3656931da818b2dc984e5842c4cda668124dac93374
- MD5 7e2ce94600ecf0c8e73aa31b292fa601
- SHA1 a235d3e5c6cd8e8217b077ff605362a00353bcab
- SHA512 1a9d648b535dbab5d96310c49646ce5c69d16fad94ecbb3a688d9548781d256364cc46db2c75a27364e3facdf63ef1dab1b19097e067b76898768d8ee3205928
- SSDEEP 12288:SUy2s8EYLsvZlqVYUWtPuwopNgIIWlWxKet4:c2smLUOxNJpWxKA4
- TLSH T1A9B4D030E6A0C035E5B711FC89B683B8A93E7E716B34D1CF52912AEE56B46E49C30753
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Raccoon Stealer V1 payload
-
Detects executables referencing many email and collaboration clients. Observed in information steale