General
- Target 2026-05-22_b27823099dd3eed513a0bfc78b9fe46e_amadey_cobalt-strike_elex_hijackloader_redline-stealer_rhadamanthys_smoke-loader_stealc_stop_vidar
- Size 1.3MB
- Sample260522-ve2kjsaz3k
- SHA256 47f3a736cf527e45c2cb370a1d78fab8940c75a51abbd02adb773a5f6fdf99c9
- MD5 b27823099dd3eed513a0bfc78b9fe46e
- SHA1 97199aab6c1102244af6f2149cc176f179e6f9a0
- SHA512 a861acafd1cb1477d41d5f535b22984354dc2a138e3a2dbac7f34363bfecc5b7f6134bd1e0a738b7591cbb6bd5dbe7e3d707639dfefda7eaacff9d360eadd83f
- SSDEEP 24576:wx/WnSyhbzvZOqU1z96H0t4/izRXTOkMtrIceMaFPjkjD29jfeKdYH:IWSytLoqUKHkakOElMaFLkEfc
- TLSH T118558D22B6909A66D1BF01719A2592207B7BBD201F205BEF4380BE1D3E745F2AF75317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-22_b27823099dd3eed513a0bfc78b9fe46e_amadey_cobalt-strike_elex_hijackloader_redline-stealer_r.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-22_b27823099dd3eed513a0bfc78b9fe46e_amadey_cobalt-strike_elex_hijackloader_redline-stealer_r.exe
Resource
win11-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-22_b27823099dd3eed513a0bfc78b9fe46e_amadey_cobalt-strike_elex_hijackloader_redline-stealer_rhadamanthys_smoke-loader_stealc_stop_vidar
- Size 1.3MB
- SHA256 47f3a736cf527e45c2cb370a1d78fab8940c75a51abbd02adb773a5f6fdf99c9
- MD5 b27823099dd3eed513a0bfc78b9fe46e
- SHA1 97199aab6c1102244af6f2149cc176f179e6f9a0
- SHA512 a861acafd1cb1477d41d5f535b22984354dc2a138e3a2dbac7f34363bfecc5b7f6134bd1e0a738b7591cbb6bd5dbe7e3d707639dfefda7eaacff9d360eadd83f
- SSDEEP 24576:wx/WnSyhbzvZOqU1z96H0t4/izRXTOkMtrIceMaFPjkjD29jfeKdYH:IWSytLoqUKHkakOElMaFLkEfc
- TLSH T118558D22B6909A66D1BF01719A2592207B7BBD201F205BEF4380BE1D3E745F2AF75317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Loads dropped DLL
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.