General
- Target 2026-10-26_f618a117668866c5868e2f254a709075_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee
- Size 238KB
- Sample261027-cehtbshy5x
- SHA256 263b62710f436c6e7c1d81e6aff4d0bef36fe936b2139ca5f84c11f8186ed027
- MD5 f618a117668866c5868e2f254a709075
- SHA1 cf630f2d3dc06449e0075f4de557a442b6e0cf8e
- SHA512 a45ca66584aeb55bb702f5efd40e09a84fc3ea7e766af9fa9a520b02d493f972f19d44beaa58c7f7ed8c82dcae3085735e1ec1ea4b84a4cce087c7cc3cadac7f
- SSDEEP 3072:q0o+iwdnP6nYrsYf18pVwkML91dXnS8zh/4TBfHXtjZqMNBn3K988zKmFaqg:q0eg6KsYfYwk6zdXnSS/4TBXv9e55A
- TLSH T19134CF21B1C0D073D637147185A5CEB14A7A7C7A6AA0844F37ECBA791FB33E1422979E
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-26_f618a117668866c5868e2f254a709075_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-26_f618a117668866c5868e2f254a709075_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee
- Size 238KB
- SHA256 263b62710f436c6e7c1d81e6aff4d0bef36fe936b2139ca5f84c11f8186ed027
- MD5 f618a117668866c5868e2f254a709075
- SHA1 cf630f2d3dc06449e0075f4de557a442b6e0cf8e
- SHA512 a45ca66584aeb55bb702f5efd40e09a84fc3ea7e766af9fa9a520b02d493f972f19d44beaa58c7f7ed8c82dcae3085735e1ec1ea4b84a4cce087c7cc3cadac7f
- SSDEEP 3072:q0o+iwdnP6nYrsYf18pVwkML91dXnS8zh/4TBfHXtjZqMNBn3K988zKmFaqg:q0eg6KsYfYwk6zdXnSS/4TBXv9e55A
- TLSH T19134CF21B1C0D073D637147185A5CEB14A7A7C7A6AA0844F37ECBA791FB33E1422979E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.