General
- Target 2026-06-28_25f1b1e8353b4e2cd5121d6b9c45b239_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 72KB
- Sample260628-3tapdagy3v
- SHA256 8611eae54cfe815ff0ec2e3eeef1f3ec86264d1e1a88545861936d7e8e0f843a
- MD5 25f1b1e8353b4e2cd5121d6b9c45b239
- SHA1 6f585b5826fdc1a07e6512205a77d431e4a3bab4
- SHA512 d3948e50ecd96b064313303b77b5a37869b64c62aa1e0a16a91e788803fee1d0fc1cbc9f11aa630ee85cc64f996c01ed556a1626cc9b30d9e9b327bda8d5f9f8
- SSDEEP 768:+00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDwwT6cBJhFd/B5U:+00URPnKfZrT2DawRR8JfP31ZB355B/i
- TLSH T1B6738E467881C4B2D80054B41426C6929FBFAC1257A5D0CBFB993E7E9F313DB893938E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-28_25f1b1e8353b4e2cd5121d6b9c45b239_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_25f1b1e8353b4e2cd5121d6b9c45b239_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260618-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_25f1b1e8353b4e2cd5121d6b9c45b239_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 72KB
- SHA256 8611eae54cfe815ff0ec2e3eeef1f3ec86264d1e1a88545861936d7e8e0f843a
- MD5 25f1b1e8353b4e2cd5121d6b9c45b239
- SHA1 6f585b5826fdc1a07e6512205a77d431e4a3bab4
- SHA512 d3948e50ecd96b064313303b77b5a37869b64c62aa1e0a16a91e788803fee1d0fc1cbc9f11aa630ee85cc64f996c01ed556a1626cc9b30d9e9b327bda8d5f9f8
- SSDEEP 768:+00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDwwT6cBJhFd/B5U:+00URPnKfZrT2DawRR8JfP31ZB355B/i
- TLSH T1B6738E467881C4B2D80054B41426C6929FBFAC1257A5D0CBFB993E7E9F313DB893938E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory