General
- Target 2026-06-28_2565187b64375d25b09965ad99c93eba_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 72KB
- Sample260628-3txh5shw2m
- SHA256 9c8147f8fb8cea4429bce347fa59a66a1e5e1e3af41ed1d405dc9f53bdd44cc6
- MD5 2565187b64375d25b09965ad99c93eba
- SHA1 fa93fc4054905ff5a966f71209cf4bed5853e33f
- SHA512 aa090f5a6a27c81494faadfe20aa7196544a9100147f248a69af9510c019522cfebb5ae3aadd1263518b84fc0019c230f82fff3bba7d9f2b58209b8f37359231
- SSDEEP 768:+00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDwNT6cBJhFd/B5Y:+00URPnKfZrT2DawRR8JfP3kZB355B/
- TLSH T116738E467881C4B2D80054B41426C6929FBFAD1257A5D0CBFB993E7E9F313DB893938D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-28_2565187b64375d25b09965ad99c93eba_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_2565187b64375d25b09965ad99c93eba_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260618-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_2565187b64375d25b09965ad99c93eba_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 72KB
- SHA256 9c8147f8fb8cea4429bce347fa59a66a1e5e1e3af41ed1d405dc9f53bdd44cc6
- MD5 2565187b64375d25b09965ad99c93eba
- SHA1 fa93fc4054905ff5a966f71209cf4bed5853e33f
- SHA512 aa090f5a6a27c81494faadfe20aa7196544a9100147f248a69af9510c019522cfebb5ae3aadd1263518b84fc0019c230f82fff3bba7d9f2b58209b8f37359231
- SSDEEP 768:+00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDwNT6cBJhFd/B5Y:+00URPnKfZrT2DawRR8JfP3kZB355B/
- TLSH T116738E467881C4B2D80054B41426C6929FBFAD1257A5D0CBFB993E7E9F313DB893938D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory