General
- Target 2026-10-01_d447908c846ea8a9faf6186f70387c88_elex_redline-stealer_rhadamanthys_smoke-loader_tofsee
- Size 165KB
- Sample261003-xpff6svgja
- SHA256 36553bd68f807eb2daf693d04170b1a4b43cfba7a42dd52ecfd40f4264b41c1d
- MD5 d447908c846ea8a9faf6186f70387c88
- SHA1 f0d70765ce936638fb119ea393d8ff30c890ca38
- SHA512 4ec373a46422adcc7716296d2c1d0d7c4e6743fc96945233c46f3d9fb35f04f67c11d49e086b2bb2b449ab1cc27b7667c88ffa743ddc0d8fc5e7bb5e6ab614d5
- SSDEEP 3072:wUu5AV9IzF4R+iA9aI6Ks2pWqSOv0g2Ew++bx:wUlIzFbi9I6KMHUGEw3b
- TLSH T14FF37D2716D4F032E39312348A69E2B25A7D763509C5DE0BAB90422A3D71793F7B970F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-01_d447908c846ea8a9faf6186f70387c88_elex_redline-stealer_rhadamanthys_smoke-loader_tofsee.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-01_d447908c846ea8a9faf6186f70387c88_elex_redline-stealer_rhadamanthys_smoke-loader_tofsee
- Size 165KB
- SHA256 36553bd68f807eb2daf693d04170b1a4b43cfba7a42dd52ecfd40f4264b41c1d
- MD5 d447908c846ea8a9faf6186f70387c88
- SHA1 f0d70765ce936638fb119ea393d8ff30c890ca38
- SHA512 4ec373a46422adcc7716296d2c1d0d7c4e6743fc96945233c46f3d9fb35f04f67c11d49e086b2bb2b449ab1cc27b7667c88ffa743ddc0d8fc5e7bb5e6ab614d5
- SSDEEP 3072:wUu5AV9IzF4R+iA9aI6Ks2pWqSOv0g2Ew++bx:wUlIzFbi9I6KMHUGEw3b
- TLSH T14FF37D2716D4F032E39312348A69E2B25A7D763509C5DE0BAB90422A3D71793F7B970F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.