General
- Target 2026-06-03_9096e521dc765a295757459600000866_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 72KB
- Sample260603-eax4kaax5p
- SHA256 c75a7b6faacca7698f055de4803172a518a541283d1a842ffbe8ef8bb21b7231
- MD5 9096e521dc765a295757459600000866
- SHA1 7fe2863bb002af720ad71a8b0ad8e2735a9dd23d
- SHA512 9dbc1b34900e88cc182cbdad1752e650e7abd4deb5bde75653748571e1005daabe938eed18f35c2a7c744aa97935a7a4f43a75df74e1b0c1cd99f8ec2e36c5c0
- SSDEEP 768:+00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDwtT6cBJhFd/B5U:+00URPnKfZrT2DawRR8JfP34ZB355B/i
- TLSH T167738D467881C4B2D80054B41426C6929FBFAD1257A5D0CBFB993E7E9F313DB893938E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-03_9096e521dc765a295757459600000866_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-03_9096e521dc765a295757459600000866_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-03_9096e521dc765a295757459600000866_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 72KB
- SHA256 c75a7b6faacca7698f055de4803172a518a541283d1a842ffbe8ef8bb21b7231
- MD5 9096e521dc765a295757459600000866
- SHA1 7fe2863bb002af720ad71a8b0ad8e2735a9dd23d
- SHA512 9dbc1b34900e88cc182cbdad1752e650e7abd4deb5bde75653748571e1005daabe938eed18f35c2a7c744aa97935a7a4f43a75df74e1b0c1cd99f8ec2e36c5c0
- SSDEEP 768:+00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDwtT6cBJhFd/B5U:+00URPnKfZrT2DawRR8JfP34ZB355B/i
- TLSH T167738D467881C4B2D80054B41426C6929FBFAD1257A5D0CBFB993E7E9F313DB893938E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory