General
- Target 2026-10-22_1062c49034e6645d389db7e7bd2f8ef5_elex_karagany_rhadamanthys_smoke-loader_stealc_stop_tofsee_vertexnet
- Size 143KB
- Sample261024-1elf8acv6s
- SHA256 3d22f41bee487415272e17f7b9d029500b076e75ae5aaea80c0799e0190e5529
- MD5 1062c49034e6645d389db7e7bd2f8ef5
- SHA1 5fc4e192c9778639db5aa92d8030a4a0c850901e
- SHA512 e60f2b7e74d4d08d336845ae51dcf91889cd5a8fa28e98a031768819c5dba28ad8fddff2f669dd66c18e5e18cba7a55ed94c6ad65f11f2e9866c60f4b13bfb01
- SSDEEP 3072:BsD2ADkpFGkTXlDJA6ba2esDetNxVgbTGV9X4:BplzpTVDVa2en/V6Mp
- TLSH T1B6E38C227AD0C032D06B11715AB9D7B5996AFA33177484C7F3840FBD6E612E09B7E34A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-22_1062c49034e6645d389db7e7bd2f8ef5_elex_karagany_rhadamanthys_smoke-loader_stealc_stop_tofsee_vertexnet.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_1062c49034e6645d389db7e7bd2f8ef5_elex_karagany_rhadamanthys_smoke-loader_stealc_stop_tofsee_vertexnet.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
vertexnet
C2
-
regive.africa.com
Mutex
-
VN_MUTEX16
Attributes
-
C2Path
/login/
Targets
-
- Target 2026-10-22_1062c49034e6645d389db7e7bd2f8ef5_elex_karagany_rhadamanthys_smoke-loader_stealc_stop_tofsee_vertexnet
- Size 143KB
- SHA256 3d22f41bee487415272e17f7b9d029500b076e75ae5aaea80c0799e0190e5529
- MD5 1062c49034e6645d389db7e7bd2f8ef5
- SHA1 5fc4e192c9778639db5aa92d8030a4a0c850901e
- SHA512 e60f2b7e74d4d08d336845ae51dcf91889cd5a8fa28e98a031768819c5dba28ad8fddff2f669dd66c18e5e18cba7a55ed94c6ad65f11f2e9866c60f4b13bfb01
- SSDEEP 3072:BsD2ADkpFGkTXlDJA6ba2esDetNxVgbTGV9X4:BplzpTVDVa2en/V6Mp
- TLSH T1B6E38C227AD0C032D06B11715AB9D7B5996AFA33177484C7F3840FBD6E612E09B7E34A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects VertexNET stealer
-
Executes dropped EXE
-
Adds Run key to start application