General
- Target 2026-10-01_2b4980ab00b58da9745b82deb70e4bfd_amadey_elex_rhadamanthys_smoke-loader_stealc_tofsee
- Size 441KB
- Sample261002-v8gr8svs2j
- SHA256 5669cbcba45d86676a567a0ce17099da3f8ed63736111f4e99530031aec9b8d2
- MD5 2b4980ab00b58da9745b82deb70e4bfd
- SHA1 3d75809ebdf9dbce23fb3adf081d2f751be20bc3
- SHA512 1f07b2c89160686e29324ee78e9671b94a193a9780c2795490b115d015e67b776a5957852c436392085994dc890748c92d7bb2b8083218a91994491d78b62151
- SSDEEP 12288:GQYD+tn/6WVetrV1hEbme1+2S7LAgCJyJB4z70bl:3TCWqhVew2cAdIJizgbl
- TLSH T18DA4011036A2DC3AF5E776302E71DBA15A66FC725535888F3318666E3E313C08AB5763
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-01_2b4980ab00b58da9745b82deb70e4bfd_amadey_elex_rhadamanthys_smoke-loader_stealc_tofsee.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
raccoon
Version
-
1.8.3-hotfix
Botnet
-
14b265e74e2847e8408db7ca21fe6fe2e9ab5767
Attributes
-
url4cnc
http://91.219.236.162/masterdanteloma
http://185.163.47.176/masterdanteloma
http://193.38.54.238/masterdanteloma
http://74.119.192.122/masterdanteloma
http://91.219.236.240/masterdanteloma
https://t.me/masterdanteloma
rc4.plain
rc4.plain
Targets
-
- Target 2026-10-01_2b4980ab00b58da9745b82deb70e4bfd_amadey_elex_rhadamanthys_smoke-loader_stealc_tofsee
- Size 441KB
- SHA256 5669cbcba45d86676a567a0ce17099da3f8ed63736111f4e99530031aec9b8d2
- MD5 2b4980ab00b58da9745b82deb70e4bfd
- SHA1 3d75809ebdf9dbce23fb3adf081d2f751be20bc3
- SHA512 1f07b2c89160686e29324ee78e9671b94a193a9780c2795490b115d015e67b776a5957852c436392085994dc890748c92d7bb2b8083218a91994491d78b62151
- SSDEEP 12288:GQYD+tn/6WVetrV1hEbme1+2S7LAgCJyJB4z70bl:3TCWqhVew2cAdIJizgbl
- TLSH T18DA4011036A2DC3AF5E776302E71DBA15A66FC725535888F3318666E3E313C08AB5763
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Raccoon Stealer V1 payload
-
Detects executables referencing many email and collaboration clients. Observed in information steale