General
- Target 2026-06-05_81ae47b9bac5a0320ab898f9426ae177_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 72KB
- Sample260605-jv697acv2w
- SHA256 3777c9b8cd2ced846882de0668966265708cfabe6f86df2e869815061d6b3812
- MD5 81ae47b9bac5a0320ab898f9426ae177
- SHA1 edca6afd6a66b6c584c1cf529b1005bb8b54b179
- SHA512 56e09955a6c70d36a8b8545e2984eaacbdcea8fc1115477aa94238c0af6866ae37d2fb5788961ad0fec0e6f8f5b0544ccec0b587cd6c3dcf950e429f0ab309aa
- SSDEEP 768:+00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDwGT6cBJhFd/B5Y:+00URPnKfZrT2DawRR8JfP3PZB355B/
- TLSH T15B738E467881C4B2D80054B41826C6929FBFAD1257A5D0CBFB993E7E9F313DB893938D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-05_81ae47b9bac5a0320ab898f9426ae177_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-05_81ae47b9bac5a0320ab898f9426ae177_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-05_81ae47b9bac5a0320ab898f9426ae177_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 72KB
- SHA256 3777c9b8cd2ced846882de0668966265708cfabe6f86df2e869815061d6b3812
- MD5 81ae47b9bac5a0320ab898f9426ae177
- SHA1 edca6afd6a66b6c584c1cf529b1005bb8b54b179
- SHA512 56e09955a6c70d36a8b8545e2984eaacbdcea8fc1115477aa94238c0af6866ae37d2fb5788961ad0fec0e6f8f5b0544ccec0b587cd6c3dcf950e429f0ab309aa
- SSDEEP 768:+00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDwGT6cBJhFd/B5Y:+00URPnKfZrT2DawRR8JfP3PZB355B/
- TLSH T15B738E467881C4B2D80054B41826C6929FBFAD1257A5D0CBFB993E7E9F313DB893938D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Adds Run key to start application
Drops file in System32 directory