General
- Target 2026-05-29_f2451e850a11cfd7dc72691f0853f269_amadey_elex_karagany_redline-stealer_rhadamanthys_smoke-loader
- Size 133KB
- Sample260529-cwne5sa12q
- SHA256 81045a6b5f4190c4ea1cd1598ee07dd7045c9c8a2e6ce55d7e4637269cc729db
- MD5 f2451e850a11cfd7dc72691f0853f269
- SHA1 d1825098c2eaa0f015cebe832136f08df6f8a31a
- SHA512 3a7684a2131561a348271003221d75b1f42cf02b9a8b7126b4d96a12cb8e7f8ffdc7e83b6bf627dce25088d04fb998064208e7177bfd1aecc0a0502604ffa108
- SSDEEP 3072:bgpgFOdpFd9iKhCZihURDuUlb2HDXwsOCCYgR1KlVfOg7pwqBTg:bWgad99KDuUlWwsOMgR141OqwqBM
- TLSH T172D36C0177C1C172F8990635183AC7F2473AFC365DA2CA477F987A2AAE323C19925797
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-29_f2451e850a11cfd7dc72691f0853f269_amadey_elex_karagany_redline-stealer_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-29_f2451e850a11cfd7dc72691f0853f269_amadey_elex_karagany_redline-stealer_rhadamanthys_smoke-loader.exe
Resource
win11-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-29_f2451e850a11cfd7dc72691f0853f269_amadey_elex_karagany_redline-stealer_rhadamanthys_smoke-loader
- Size 133KB
- SHA256 81045a6b5f4190c4ea1cd1598ee07dd7045c9c8a2e6ce55d7e4637269cc729db
- MD5 f2451e850a11cfd7dc72691f0853f269
- SHA1 d1825098c2eaa0f015cebe832136f08df6f8a31a
- SHA512 3a7684a2131561a348271003221d75b1f42cf02b9a8b7126b4d96a12cb8e7f8ffdc7e83b6bf627dce25088d04fb998064208e7177bfd1aecc0a0502604ffa108
- SSDEEP 3072:bgpgFOdpFd9iKhCZihURDuUlb2HDXwsOCCYgR1KlVfOg7pwqBTg:bWgad99KDuUlWwsOMgR141OqwqBM
- TLSH T172D36C0177C1C172F8990635183AC7F2473AFC365DA2CA477F987A2AAE323C19925797
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Adds Run key to start application