General
- Target 2026-06-27_b1e6ca2dadb01239c58543a8b52e6fb4_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 1.3MB
- Sample260629-ec6hqacv7v
- SHA256 d09463e2e89086aaadc0fac73db34692991c8c1f3fa20c828ddf9fc716a938e9
- MD5 b1e6ca2dadb01239c58543a8b52e6fb4
- SHA1 af21fa219fa89370a21233d63a2f496e439176c2
- SHA512 29a4a1fa244eadb17217c9632da533b418ad69c6471cca294e82e6ec34f99df639e1e6415d13d9d1b1c71fced5d8e26eedbad57373eeaf38a35a6c21d909dff0
- SSDEEP 12288:gHBqcGyS0VTBG//sop9bw/W1wR/kjy6FtgQAdJsg0HjoMWk:JcnQ/tbw/2Mkjy6Fr7g0ok
- TLSH T1F555121475D3E726D412C5B1485181B1577ECD812FD1D28B7A882F2ABEBFB9C0BEB284
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_b1e6ca2dadb01239c58543a8b52e6fb4_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_b1e6ca2dadb01239c58543a8b52e6fb4_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 1.3MB
- SHA256 d09463e2e89086aaadc0fac73db34692991c8c1f3fa20c828ddf9fc716a938e9
- MD5 b1e6ca2dadb01239c58543a8b52e6fb4
- SHA1 af21fa219fa89370a21233d63a2f496e439176c2
- SHA512 29a4a1fa244eadb17217c9632da533b418ad69c6471cca294e82e6ec34f99df639e1e6415d13d9d1b1c71fced5d8e26eedbad57373eeaf38a35a6c21d909dff0
- SSDEEP 12288:gHBqcGyS0VTBG//sop9bw/W1wR/kjy6FtgQAdJsg0HjoMWk:JcnQ/tbw/2Mkjy6Fr7g0ok
- TLSH T1F555121475D3E726D412C5B1485181B1577ECD812FD1D28B7A882F2ABEBFB9C0BEB284
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1