General
- Target 2026-09-30_74143bc9841382da704973f7d9837422_amadey_elex_rhadamanthys_smoke-loader_stop
- Size 524KB
- Sample261001-paembsz18m
- SHA256 9d4d9a50def76322dca1e6290e7eadbaf3ecc502018b4a75fffe385f0cf63682
- MD5 74143bc9841382da704973f7d9837422
- SHA1 dfb53135f5bbee54f6624392b253418f56860055
- SHA512 1e08cce0770d6e4494f01d563e9d7bde21a23f0460a316a18afd479496f8b7145500253fd52ae5cdcb127cb50c4932b0c6d12b1158cf10c25ad4cd785f96ec11
- SSDEEP 12288:hymdWYTarNPjMrV3z/2uxAijSuGlojdXAW35H5:hRWtrlE3z/2SAjuMkqoH
- TLSH T1ECB4E020B6A0D035F5B751F945BA93B9A93D7E706F3090CB62C626EE16342E48D3C74B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-30_74143bc9841382da704973f7d9837422_amadey_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
raccoon
Version
-
1.8.1
Botnet
-
a8a04412b0db5dca0e2f7ee3c6455e08fdf3f698
Attributes
-
url4cnc
https://telete.in/h_electricryptors2
rc4.plain
rc4.plain
Targets
-
- Target 2026-09-30_74143bc9841382da704973f7d9837422_amadey_elex_rhadamanthys_smoke-loader_stop
- Size 524KB
- SHA256 9d4d9a50def76322dca1e6290e7eadbaf3ecc502018b4a75fffe385f0cf63682
- MD5 74143bc9841382da704973f7d9837422
- SHA1 dfb53135f5bbee54f6624392b253418f56860055
- SHA512 1e08cce0770d6e4494f01d563e9d7bde21a23f0460a316a18afd479496f8b7145500253fd52ae5cdcb127cb50c4932b0c6d12b1158cf10c25ad4cd785f96ec11
- SSDEEP 12288:hymdWYTarNPjMrV3z/2uxAijSuGlojdXAW35H5:hRWtrlE3z/2SAjuMkqoH
- TLSH T1ECB4E020B6A0D035F5B751F945BA93B9A93D7E706F3090CB62C626EE16342E48D3C74B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Raccoon Stealer V1 payload
-
Detects executables referencing many email and collaboration clients. Observed in information steale