General
- Target 2026-10-07_c2fba7710bb54007a3c89487ea3600f6_amadey_elex_redline-stealer_rhadamanthys_smoke-loader
- Size 227KB
- Sample261008-grsxaa1xhs
- SHA256 277db8a4a0a43e7a8a4a34516505e415c212a57c3c89d87ba024d073eff23f2b
- MD5 c2fba7710bb54007a3c89487ea3600f6
- SHA1 480483fcc52c76f32e006a350d89034801cb903f
- SHA512 8e4f4d938bc2e17880ecc8f9226f1c5b0631c935fe68d1f8962edd4d40b5331cb0d603677c9397949b298d1e3cf3f77d30d61961736be3a737d81487263724d7
- SSDEEP 3072:zHpBoCJwRMEqvaH8TduAqWz+fvzKFsHYU6Te8HlQOaGqrnaOx27lLpFnAwRhWRD:zHcCJvm8mjHzKFe6nHlQjeDbAw6
- TLSH T11534E021B690D03EC056D2F047A4C6E20AF92D6116358DCB7FA80E7BDFEC2E07965766
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-07_c2fba7710bb54007a3c89487ea3600f6_amadey_elex_redline-stealer_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-07_c2fba7710bb54007a3c89487ea3600f6_amadey_elex_redline-stealer_rhadamanthys_smoke-loader
- Size 227KB
- SHA256 277db8a4a0a43e7a8a4a34516505e415c212a57c3c89d87ba024d073eff23f2b
- MD5 c2fba7710bb54007a3c89487ea3600f6
- SHA1 480483fcc52c76f32e006a350d89034801cb903f
- SHA512 8e4f4d938bc2e17880ecc8f9226f1c5b0631c935fe68d1f8962edd4d40b5331cb0d603677c9397949b298d1e3cf3f77d30d61961736be3a737d81487263724d7
- SSDEEP 3072:zHpBoCJwRMEqvaH8TduAqWz+fvzKFsHYU6Te8HlQOaGqrnaOx27lLpFnAwRhWRD:zHcCJvm8mjHzKFe6nHlQjeDbAw6
- TLSH T11534E021B690D03EC056D2F047A4C6E20AF92D6116358DCB7FA80E7BDFEC2E07965766
- MD5 SHA1 SHA512 SSDEEP TLSH
Detects Citadel payload
Suspicious use of SetThreadContext