General
- Target 2026-09-30_87f1807a4e54e84533558b7f36467434_amadey_elex_rhadamanthys_smoke-loader_stop
- Size 499KB
- Sample260930-lv39msxflb
- SHA256 e0ac99a524bc0e7209525728876fb1659cecf5661c322f57e2395126a215256b
- MD5 87f1807a4e54e84533558b7f36467434
- SHA1 367f2d69957324d25e9b188ecf38ba450058c43b
- SHA512 912d356a9978823ece4699c6cd045881205278024930bb2a9c35e676b36ffaa42fd5c53aabe64d35c1308f5a6627e2b39d9e4f51e08d38a248c5a1512e7a86e9
- SSDEEP 12288:LZLbVHzWLEAQfuXx28sCcDWkpsCClo+bFzz:L9bVHHgs8OrpsdTFz
- TLSH T19DB4E020B7A0C035F0B711F949BA93A8B93E7AB16B3451CB62D616FE16346E8CD31357
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-30_87f1807a4e54e84533558b7f36467434_amadey_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
raccoon
Version
-
1.8.1
Botnet
-
a8a04412b0db5dca0e2f7ee3c6455e08fdf3f698
Attributes
-
url4cnc
https://telete.in/h_electricryptors2
rc4.plain
rc4.plain
Targets
-
- Target 2026-09-30_87f1807a4e54e84533558b7f36467434_amadey_elex_rhadamanthys_smoke-loader_stop
- Size 499KB
- SHA256 e0ac99a524bc0e7209525728876fb1659cecf5661c322f57e2395126a215256b
- MD5 87f1807a4e54e84533558b7f36467434
- SHA1 367f2d69957324d25e9b188ecf38ba450058c43b
- SHA512 912d356a9978823ece4699c6cd045881205278024930bb2a9c35e676b36ffaa42fd5c53aabe64d35c1308f5a6627e2b39d9e4f51e08d38a248c5a1512e7a86e9
- SSDEEP 12288:LZLbVHzWLEAQfuXx28sCcDWkpsCClo+bFzz:L9bVHHgs8OrpsdTFz
- TLSH T19DB4E020B7A0C035F0B711F949BA93A8B93E7AB16B3451CB62D616FE16346E8CD31357
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Raccoon Stealer V1 payload
-
Detects executables referencing many email and collaboration clients. Observed in information steale