General
- Target 2026-09-30_a4e35ee3257bb4b6586aa493d17210bd_amadey_elex_rhadamanthys_smoke-loader_stop
- Size 494KB
- Sample261001-km4prsstez
- SHA256 af0af4f44007acc7f097a7e9902f180cec8067ab3b992bca27716c316d8b52f5
- MD5 a4e35ee3257bb4b6586aa493d17210bd
- SHA1 304bd73e23778172af271704890ff14740866dd6
- SHA512 4807dc1efbc6784558f6b62a40b0a6c9f1fc8fc0074b6c4adea958849247b5792b6ea3c0c155228966f6114e9a8267715cc237caa7c9108493291fe69e714dc0
- SSDEEP 12288:uZvoyiH/CGcCGj31ac7AmMkkXJBZ4/6y5KpddKvdhM:utoyrxjymfinZ4/pKpdQvP
- TLSH T1CCB4E120A6A1C035F5F712F8497A5378A83D7AB26B7440CB62C61BFE52386F89D30757
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-30_a4e35ee3257bb4b6586aa493d17210bd_amadey_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
raccoon
Version
-
1.8.1
Botnet
-
a8a04412b0db5dca0e2f7ee3c6455e08fdf3f698
Attributes
-
url4cnc
https://telete.in/h_electricryptors2
rc4.plain
rc4.plain
Targets
-
- Target 2026-09-30_a4e35ee3257bb4b6586aa493d17210bd_amadey_elex_rhadamanthys_smoke-loader_stop
- Size 494KB
- SHA256 af0af4f44007acc7f097a7e9902f180cec8067ab3b992bca27716c316d8b52f5
- MD5 a4e35ee3257bb4b6586aa493d17210bd
- SHA1 304bd73e23778172af271704890ff14740866dd6
- SHA512 4807dc1efbc6784558f6b62a40b0a6c9f1fc8fc0074b6c4adea958849247b5792b6ea3c0c155228966f6114e9a8267715cc237caa7c9108493291fe69e714dc0
- SSDEEP 12288:uZvoyiH/CGcCGj31ac7AmMkkXJBZ4/6y5KpddKvdhM:utoyrxjymfinZ4/pKpdQvP
- TLSH T1CCB4E120A6A1C035F5F712F8497A5378A83D7AB26B7440CB62C61BFE52386F89D30757
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Raccoon Stealer V1 payload
-
Detects executables referencing many email and collaboration clients. Observed in information steale