General
- Target 2026-10-08_28fd0db3127207b942cf9812bb736a67_amadey_elex_karagany_manuscrypt_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 1.5MB
- Sample261009-xa7bcadf57
- SHA256 b37e32c5cde2d08cb64d0f10f0432b9c2a61e5791e1fdb8380ff3fa9ec87895f
- MD5 28fd0db3127207b942cf9812bb736a67
- SHA1 578a916626050fc8fb87cae7040b18d69684cc85
- SHA512 3bfd4bd332b092ccad4aefe00724ae64fd002775a0c7f70cc77deab0cf63782d50aae3e05e627da8e3843e6309e8a4e37d788f7c84824fe2456c16e19a8d06bd
- SSDEEP 24576:d20ZbWvPgbhXFNUpC6nH/e3N30YNfhoN5+cc1NMX6OYPRRlg1:UKZWA/MXKR/A
- TLSH T13675A2B1D92A697FF37BDB3BC8AA79258A1533B37A5390CB143075C40572282BF4614E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-08_28fd0db3127207b942cf9812bb736a67_amadey_elex_karagany_manuscrypt_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-08_28fd0db3127207b942cf9812bb736a67_amadey_elex_karagany_manuscrypt_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260911-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-08_28fd0db3127207b942cf9812bb736a67_amadey_elex_karagany_manuscrypt_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 1.5MB
- SHA256 b37e32c5cde2d08cb64d0f10f0432b9c2a61e5791e1fdb8380ff3fa9ec87895f
- MD5 28fd0db3127207b942cf9812bb736a67
- SHA1 578a916626050fc8fb87cae7040b18d69684cc85
- SHA512 3bfd4bd332b092ccad4aefe00724ae64fd002775a0c7f70cc77deab0cf63782d50aae3e05e627da8e3843e6309e8a4e37d788f7c84824fe2456c16e19a8d06bd
- SSDEEP 24576:d20ZbWvPgbhXFNUpC6nH/e3N30YNfhoN5+cc1NMX6OYPRRlg1:UKZWA/MXKR/A
- TLSH T13675A2B1D92A697FF37BDB3BC8AA79258A1533B37A5390CB143075C40572282BF4614E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.