General
- Target 2026-09-30_e35100e48a07a8de704adad1c8baa658_amadey_elex_rhadamanthys_smoke-loader_stop
- Size 527KB
- Sample261001-eldt3azx5l
- SHA256 ff59236f3c284f946185c098119a2d11fbc30463b85b63d190c1bebef79c45f5
- MD5 e35100e48a07a8de704adad1c8baa658
- SHA1 d1a003d7bda2ebeb1af2f4af9e3c5cbe6ee60fa3
- SHA512 4fb686a50d37bf64a73d6600dc359b5253f404bb40bdef51088cff3446b1cdf7be9857e07c92806d87d22fd7f8256ff0ea7bab1ec764ff8e5c2d2f66ea80ea7b
- SSDEEP 12288:LXfLi4oYHeUrmmNcey5BWBCQiWNaAT3XNUsLrDc3:LX5NE2aGiWEqOsLrDc3
- TLSH T127B4D031B6E0C030E5B702F899A693A96929FD715B2053CB62D526EE7634FE8DC30753
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-30_e35100e48a07a8de704adad1c8baa658_amadey_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
raccoon
Version
-
1.8.1
Botnet
-
a8a04412b0db5dca0e2f7ee3c6455e08fdf3f698
Attributes
-
url4cnc
https://telete.in/h_electricryptors2
rc4.plain
rc4.plain
Targets
-
- Target 2026-09-30_e35100e48a07a8de704adad1c8baa658_amadey_elex_rhadamanthys_smoke-loader_stop
- Size 527KB
- SHA256 ff59236f3c284f946185c098119a2d11fbc30463b85b63d190c1bebef79c45f5
- MD5 e35100e48a07a8de704adad1c8baa658
- SHA1 d1a003d7bda2ebeb1af2f4af9e3c5cbe6ee60fa3
- SHA512 4fb686a50d37bf64a73d6600dc359b5253f404bb40bdef51088cff3446b1cdf7be9857e07c92806d87d22fd7f8256ff0ea7bab1ec764ff8e5c2d2f66ea80ea7b
- SSDEEP 12288:LXfLi4oYHeUrmmNcey5BWBCQiWNaAT3XNUsLrDc3:LX5NE2aGiWEqOsLrDc3
- TLSH T127B4D031B6E0C030E5B702F899A693A96929FD715B2053CB62D526EE7634FE8DC30753
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Raccoon Stealer V1 payload
-
Detects executables referencing many email and collaboration clients. Observed in information steale