General
- Target 2026-06-01_8833ed2e985a811a698cb69b6b08109b_amadey_elex_redline-stealer_smoke-loader_stealc_stop
- Size 123KB
- Sample260601-eyraxscs8w
- SHA256 810c1f13a08ad7ccf74670d9e91513ed193a7688a6c6d9e47ac721d27e476f24
- MD5 8833ed2e985a811a698cb69b6b08109b
- SHA1 dfbb32b39075e8b50e62c3cc3ac05c2a5f64906a
- SHA512 195e1281d3ffd326b801b276c2bee6fb403e62fd6209d6fc1091d697a3c577989927febf5218135625efb4adee844d8c323fa75025c5b70423a4763995ca1bce
- SSDEEP 1536:82Fb4bdd6M1I23CsoX/DHZclZ4gQhuArbnSOkLxnVDtFn/wo6k5UpwtsM:Hh4HZ1r3QvmlVQ1SX5tFn/B6k5UhM
- TLSH T19AC38D217881C0B7C04AD5B00919D361EA7F7E3296B85583F7990BBA9FB13D0763D26B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-01_8833ed2e985a811a698cb69b6b08109b_amadey_elex_redline-stealer_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-01_8833ed2e985a811a698cb69b6b08109b_amadey_elex_redline-stealer_smoke-loader_stealc_stop.exe
Resource
win11-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-01_8833ed2e985a811a698cb69b6b08109b_amadey_elex_redline-stealer_smoke-loader_stealc_stop
- Size 123KB
- SHA256 810c1f13a08ad7ccf74670d9e91513ed193a7688a6c6d9e47ac721d27e476f24
- MD5 8833ed2e985a811a698cb69b6b08109b
- SHA1 dfbb32b39075e8b50e62c3cc3ac05c2a5f64906a
- SHA512 195e1281d3ffd326b801b276c2bee6fb403e62fd6209d6fc1091d697a3c577989927febf5218135625efb4adee844d8c323fa75025c5b70423a4763995ca1bce
- SSDEEP 1536:82Fb4bdd6M1I23CsoX/DHZclZ4gQhuArbnSOkLxnVDtFn/wo6k5UpwtsM:Hh4HZ1r3QvmlVQ1SX5tFn/B6k5UhM
- TLSH T19AC38D217881C0B7C04AD5B00919D361EA7F7E3296B85583F7990BBA9FB13D0763D26B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Adds Run key to start application
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.