General
- Target 2026-06-27_375c50b402083bda785e1fc6571f3e46_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 547KB
- Sample260629-kdk63aay8r
- SHA256 25e052c26d5a332449dfb2f4737df0f29d8dfb42176cafd19da7a65fbed7c607
- MD5 375c50b402083bda785e1fc6571f3e46
- SHA1 32734bd3a4760bbe8ac8b93d88169af1c0322d06
- SHA512 840c7e90a87c1ccfe9fe0ae177f1da4157af9495b9ce3ede3381380f48e4700531fad06886d8a8c323341544091988ee48ae4c99b218f550c4e98c05ceb698cd
- SSDEEP 6144:xLlDX3EWpBNBH+aqsuUHwizO8Sqq/wr8Kvwr:xxDkaBNkaxTHUKqorI
- TLSH T179C4F115B991C0B2D45240B81061EB656B6E7E31274B828B77CA7A2B9F313E1C73DB1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_375c50b402083bda785e1fc6571f3e46_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_375c50b402083bda785e1fc6571f3e46_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260617-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_375c50b402083bda785e1fc6571f3e46_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 547KB
- SHA256 25e052c26d5a332449dfb2f4737df0f29d8dfb42176cafd19da7a65fbed7c607
- MD5 375c50b402083bda785e1fc6571f3e46
- SHA1 32734bd3a4760bbe8ac8b93d88169af1c0322d06
- SHA512 840c7e90a87c1ccfe9fe0ae177f1da4157af9495b9ce3ede3381380f48e4700531fad06886d8a8c323341544091988ee48ae4c99b218f550c4e98c05ceb698cd
- SSDEEP 6144:xLlDX3EWpBNBH+aqsuUHwizO8Sqq/wr8Kvwr:xxDkaBNkaxTHUKqorI
- TLSH T179C4F115B991C0B2D45240B81061EB656B6E7E31274B828B77CA7A2B9F313E1C73DB1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.