General
- Target 2026-05-25_7ca9152789ef5082137d772f75e6d8ef_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 72KB
- Sample260525-aycejsds81
- SHA256 4a6cecd0fb5260cc3b11ae3f9c3f06373b3a2206446aa136004aa7dce5cd10e2
- MD5 7ca9152789ef5082137d772f75e6d8ef
- SHA1 7df7ee1465d7ffce5c904b28ec46f46da72e4226
- SHA512 b32ba3de8d80b18ab44da1e5856d474ad2cc9923db5f3cd0b8ccfcfbb3f85f3e9ddda2462d8bb21e3e2520098b878ea17fccdf029af7dac3db532c0bc86ba914
- SSDEEP 768:+00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDwtT6cBJhFd/B5Y:+00URPnKfZrT2DawRR8JfP3sZB355B/
- TLSH T144738E467881C4B2D80054B41826C6929FBFAD1257A5D0CBFB993E7E9F313DB893938D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-25_7ca9152789ef5082137d772f75e6d8ef_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-25_7ca9152789ef5082137d772f75e6d8ef_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-25_7ca9152789ef5082137d772f75e6d8ef_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 72KB
- SHA256 4a6cecd0fb5260cc3b11ae3f9c3f06373b3a2206446aa136004aa7dce5cd10e2
- MD5 7ca9152789ef5082137d772f75e6d8ef
- SHA1 7df7ee1465d7ffce5c904b28ec46f46da72e4226
- SHA512 b32ba3de8d80b18ab44da1e5856d474ad2cc9923db5f3cd0b8ccfcfbb3f85f3e9ddda2462d8bb21e3e2520098b878ea17fccdf029af7dac3db532c0bc86ba914
- SSDEEP 768:+00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDwtT6cBJhFd/B5Y:+00URPnKfZrT2DawRR8JfP3sZB355B/
- TLSH T144738E467881C4B2D80054B41826C6929FBFAD1257A5D0CBFB993E7E9F313DB893938D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory