General
- Target 2026-05-06_a88ef2adc546ded16f447a0bf8c1545f_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop_swisyn
- Size 186KB
- Sample260506-p4wspsft3k
- SHA256 60d04b4cfdcf8fdb9e27fc292e2384a4212cf74b4d6d6bf7dcce7a161d86a154
- MD5 a88ef2adc546ded16f447a0bf8c1545f
- SHA1 b11eccfe492d9cc0403e037b10a0fdbb6d133981
- SHA512 9cc61b959512d447c8a8ac40b32eabe5abe1d5c99c6085388a0a9dae7fa88c71bf63769c8268ee645bb4aac7e4ca059d9ab9d4de293f8e1cb8fd159dcdd00dc1
- SSDEEP 3072:XVqoCl/YgjxEufVU0TbTyDDalqpiwUgLAc6VNRPhOB:XsLqdufVUNDa1KLAc5B
- TLSH T172144A13BE219C3FD84285F128B5C66ABE262E351BD0AD0B7A52FB152A7124371F531F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-06_a88ef2adc546ded16f447a0bf8c1545f_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop_swisyn.exe
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-06_a88ef2adc546ded16f447a0bf8c1545f_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop_swisyn.exe
Resource
win11-20260130-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-06_a88ef2adc546ded16f447a0bf8c1545f_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop_swisyn
- Size 186KB
- SHA256 60d04b4cfdcf8fdb9e27fc292e2384a4212cf74b4d6d6bf7dcce7a161d86a154
- MD5 a88ef2adc546ded16f447a0bf8c1545f
- SHA1 b11eccfe492d9cc0403e037b10a0fdbb6d133981
- SHA512 9cc61b959512d447c8a8ac40b32eabe5abe1d5c99c6085388a0a9dae7fa88c71bf63769c8268ee645bb4aac7e4ca059d9ab9d4de293f8e1cb8fd159dcdd00dc1
- SSDEEP 3072:XVqoCl/YgjxEufVU0TbTyDDalqpiwUgLAc6VNRPhOB:XsLqdufVUNDa1KLAc5B
- TLSH T172144A13BE219C3FD84285F128B5C66ABE262E351BD0AD0B7A52FB152A7124371F531F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Modifies visibility of hidden/system files in Explorer
Executes dropped EXE
Adds Run key to start application
Drops file in System32 directory