General
- Target 2026-06-30_b260e88f04f8fd940264652e4805b81b_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 72KB
- Sample260701-dssfcsdt8q
- SHA256 0367847e4066128f1d1233b0b6d33ae182bb3e0c3388f30d82c95d8851d13be6
- MD5 b260e88f04f8fd940264652e4805b81b
- SHA1 1e6bc0d95da382f534931d2aa59d606a2ead3e21
- SHA512 1f511f5243611e7b64a3206783a3b6ab0a0153519dfadbe09b8b4a0b3f00a3d9045c5d7cfea8dcf0d65ffc5a4a3b19ab950bbbd53792c5b4b12a214a495653e7
- SSDEEP 1536:+00URPnKfZrT2DawRR8JfP3tZZB355B/i:+00URSfsGyRyZB355Ba
- TLSH T1D2738E467881C4B2D80054B41426C6929F7FAC1257A5C0CBFB993E7E9F313DB893938E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-30_b260e88f04f8fd940264652e4805b81b_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-30_b260e88f04f8fd940264652e4805b81b_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260629-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_b260e88f04f8fd940264652e4805b81b_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 72KB
- SHA256 0367847e4066128f1d1233b0b6d33ae182bb3e0c3388f30d82c95d8851d13be6
- MD5 b260e88f04f8fd940264652e4805b81b
- SHA1 1e6bc0d95da382f534931d2aa59d606a2ead3e21
- SHA512 1f511f5243611e7b64a3206783a3b6ab0a0153519dfadbe09b8b4a0b3f00a3d9045c5d7cfea8dcf0d65ffc5a4a3b19ab950bbbd53792c5b4b12a214a495653e7
- SSDEEP 1536:+00URPnKfZrT2DawRR8JfP3tZZB355B/i:+00URSfsGyRyZB355Ba
- TLSH T1D2738E467881C4B2D80054B41426C6929F7FAC1257A5C0CBFB993E7E9F313DB893938E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory