General
- Target 2026-05-11_0f87a57b71e80884244076c9b8d81a24_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 72KB
- Sample260511-kb61radt3x
- SHA256 7bc58b2cc524824aa71fbce782296af87302e6974fb4360985e12e85d210c7ee
- MD5 0f87a57b71e80884244076c9b8d81a24
- SHA1 2fcd1a5ce9cad680f15e9096ab1f7223a9e6a6e5
- SHA512 dd844e2c465f64d36db0560c360ba6d6d6423e52a92fbee688f153c1203d43328930b5c921e8f33248fe29d68b165e8310e0f53ddeacc3dc7daa4c386d3af044
- SSDEEP 768:+00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDwAT6cBJhFd/B5U:+00URPnKfZrT2DawRR8JfP3BZB355B/i
- TLSH T1A5738E467881C4B2D80054B41426C6929F7FAD1257A5D0CBFB993E7E9F313DB893938E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-11_0f87a57b71e80884244076c9b8d81a24_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-11_0f87a57b71e80884244076c9b8d81a24_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-11_0f87a57b71e80884244076c9b8d81a24_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 72KB
- SHA256 7bc58b2cc524824aa71fbce782296af87302e6974fb4360985e12e85d210c7ee
- MD5 0f87a57b71e80884244076c9b8d81a24
- SHA1 2fcd1a5ce9cad680f15e9096ab1f7223a9e6a6e5
- SHA512 dd844e2c465f64d36db0560c360ba6d6d6423e52a92fbee688f153c1203d43328930b5c921e8f33248fe29d68b165e8310e0f53ddeacc3dc7daa4c386d3af044
- SSDEEP 768:+00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDwAT6cBJhFd/B5U:+00URPnKfZrT2DawRR8JfP3BZB355B/i
- TLSH T1A5738E467881C4B2D80054B41426C6929F7FAD1257A5D0CBFB993E7E9F313DB893938E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Adds Run key to start application
Drops file in System32 directory