General
- Target 2026-07-02_7ce0b162d3e9e832441380391ee6f980_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc
- Size 85KB
- Sample260702-vtsaesaw7t
- SHA256 bef87508067727e43301db8224ca1f868a88d385693c09cc1a25820f22a17447
- MD5 7ce0b162d3e9e832441380391ee6f980
- SHA1 a9d3a77ce5054b59df86db0fc26dfddd7d1920d3
- SHA512 aad7bed421d195519d12c9b751cf03f8dc49d402cea089b50072ade8e942d87aad20807a94348bb486e670aa8e13406cf540e12d59fadb9a43b45ece4771064d
- SSDEEP 1536:WnAkZVvvhXIgA3lh+/dwJyfZFX9hD/k4upEO:cAkZhSzWFuH
- TLSH T13D833A1A6E93C033F4111D708AA4D5E14BFE7C2335B6A16FFF4406696EF11804E6A7BA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_7ce0b162d3e9e832441380391ee6f980_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_7ce0b162d3e9e832441380391ee6f980_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc.exe
Resource
win11ltsc2024-20260629-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_7ce0b162d3e9e832441380391ee6f980_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc
- Size 85KB
- SHA256 bef87508067727e43301db8224ca1f868a88d385693c09cc1a25820f22a17447
- MD5 7ce0b162d3e9e832441380391ee6f980
- SHA1 a9d3a77ce5054b59df86db0fc26dfddd7d1920d3
- SHA512 aad7bed421d195519d12c9b751cf03f8dc49d402cea089b50072ade8e942d87aad20807a94348bb486e670aa8e13406cf540e12d59fadb9a43b45ece4771064d
- SSDEEP 1536:WnAkZVvvhXIgA3lh+/dwJyfZFX9hD/k4upEO:cAkZhSzWFuH
- TLSH T13D833A1A6E93C033F4111D708AA4D5E14BFE7C2335B6A16FFF4406696EF11804E6A7BA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Executes dropped EXE
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.