General
- Target 2026-09-30_f008cb83c0c46a4dc570ca19a80a4750_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 297KB
- Sample261001-c6c26aysav
- SHA256 86ea08c7caaeadc703bc8542879923a0e82041c6ce13f669cef6cdc9afb5e282
- MD5 f008cb83c0c46a4dc570ca19a80a4750
- SHA1 36d7332246707a4436ea31bc593ce8fd6aa302ef
- SHA512 edeadd652ab3702f28bfb122c4c7582e0ce4598da1f587a13df0e15357a87608a15c100c5a62b1c9aefe9965a399eba8849768b443e9207a048469c91785c6c9
- SSDEEP 3072:SKnE41IjTgjA4XEQX5nBv7gb02heVNrW+bTDUVggjcGkNIVqIGpZa9uD6VdyhknI:SKnEIIgAM1B0b0247rWMY7ITsq9wVfG
- TLSH T1E254BEC076B2D8B3D18535B18826CFA17B7AB839D664994B3B74536E5EE33C0C66230D
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-30_f008cb83c0c46a4dc570ca19a80a4750_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-30_f008cb83c0c46a4dc570ca19a80a4750_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
0005
Extracted
Family
-
smokeloader
Version
-
2020
C2
-
https://oakland-studio.video/search.php
-
https://seattle-university.video/search.php
rc4.i32
rc4.i32
Targets
-
- Target 2026-09-30_f008cb83c0c46a4dc570ca19a80a4750_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 297KB
- SHA256 86ea08c7caaeadc703bc8542879923a0e82041c6ce13f669cef6cdc9afb5e282
- MD5 f008cb83c0c46a4dc570ca19a80a4750
- SHA1 36d7332246707a4436ea31bc593ce8fd6aa302ef
- SHA512 edeadd652ab3702f28bfb122c4c7582e0ce4598da1f587a13df0e15357a87608a15c100c5a62b1c9aefe9965a399eba8849768b443e9207a048469c91785c6c9
- SSDEEP 3072:SKnE41IjTgjA4XEQX5nBv7gb02heVNrW+bTDUVggjcGkNIVqIGpZa9uD6VdyhknI:SKnEIIgAM1B0b0247rWMY7ITsq9wVfG
- TLSH T1E254BEC076B2D8B3D18535B18826CFA17B7AB839D664994B3B74536E5EE33C0C66230D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Deletes itself