General
- Target 2026-07-02_ed891fd0996f5c3f6a809ae6ade3c64a_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 129KB
- Sample260702-mvfc9aew9k
- SHA256 badeaf22101d4bff8e7c6461cc898a8d2ef5d3d00e86b9438db48ea8a8c3545c
- MD5 ed891fd0996f5c3f6a809ae6ade3c64a
- SHA1 3f68a07013f3ed65dac2ea0aba94c541d8d5a6dd
- SHA512 f95b549feae03e66105334574102e445ca67f8089c0c2632055d43159cd27a208cfbde21207d34ad9dfb02906a5da5c3466165ef3c9cb52c7276d8a650f80f68
- SSDEEP 1536:e4Obk1qdPJlTQ3eQMUtCBHMdvX70DfgGrqmscJ8b+TNwOoVgKS6jbSvRcPU0+Ato:0lTUezUt7gNj5HZxn6nSvys0Zt90p
- TLSH T1B9D3F1057D80D172C46682712277C623AF6E756513B4629FBBE553AA0F327C06E3C36B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_ed891fd0996f5c3f6a809ae6ade3c64a_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_ed891fd0996f5c3f6a809ae6ade3c64a_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260629-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_ed891fd0996f5c3f6a809ae6ade3c64a_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 129KB
- SHA256 badeaf22101d4bff8e7c6461cc898a8d2ef5d3d00e86b9438db48ea8a8c3545c
- MD5 ed891fd0996f5c3f6a809ae6ade3c64a
- SHA1 3f68a07013f3ed65dac2ea0aba94c541d8d5a6dd
- SHA512 f95b549feae03e66105334574102e445ca67f8089c0c2632055d43159cd27a208cfbde21207d34ad9dfb02906a5da5c3466165ef3c9cb52c7276d8a650f80f68
- SSDEEP 1536:e4Obk1qdPJlTQ3eQMUtCBHMdvX70DfgGrqmscJ8b+TNwOoVgKS6jbSvRcPU0+Ato:0lTUezUt7gNj5HZxn6nSvys0Zt90p
- TLSH T1B9D3F1057D80D172C46682712277C623AF6E756513B4629FBBE553AA0F327C06E3C36B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.