General
- Target 2026-05-29_55b8aeb10c3603735289cf1e4a1f2241_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 72KB
- Sample260529-g8zfdset41
- SHA256 550a57fdc0d90c1fc11e57e4d76617eae2a393727ec0ddfad9ac6de290a2d30b
- MD5 55b8aeb10c3603735289cf1e4a1f2241
- SHA1 3252476225134535d714033e5aa8a409f0a7700b
- SHA512 37e74659be4f08de6a15228b450ad6691aeb44b5daae90dc969a8525999cbd6b47b329125057ce8b06c11570d26b62205f26cea4fd95daf823a69c54a7114278
- SSDEEP 768:+00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDwqT6cBJhFd/B5U:+00URPnKfZrT2DawRR8JfP3fZB355B/i
- TLSH T17E738E467881C4B2D80054B41426C6929F7FAD1257A5D0CBFB993E7E9F313DB893938D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-29_55b8aeb10c3603735289cf1e4a1f2241_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-29_55b8aeb10c3603735289cf1e4a1f2241_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-29_55b8aeb10c3603735289cf1e4a1f2241_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 72KB
- SHA256 550a57fdc0d90c1fc11e57e4d76617eae2a393727ec0ddfad9ac6de290a2d30b
- MD5 55b8aeb10c3603735289cf1e4a1f2241
- SHA1 3252476225134535d714033e5aa8a409f0a7700b
- SHA512 37e74659be4f08de6a15228b450ad6691aeb44b5daae90dc969a8525999cbd6b47b329125057ce8b06c11570d26b62205f26cea4fd95daf823a69c54a7114278
- SSDEEP 768:+00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDwqT6cBJhFd/B5U:+00URPnKfZrT2DawRR8JfP3fZB355B/i
- TLSH T17E738E467881C4B2D80054B41426C6929F7FAD1257A5D0CBFB993E7E9F313DB893938D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Adds Run key to start application
Drops file in System32 directory