General
- Target 2026-07-08_b0fed72eb020dce7c7cbe4804f7990c8_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 72KB
- Sample260708-131k2shy2n
- SHA256 5805e670e60ef8096a4dd62fa1ba1fedb81cf3cce1c207b31f0532f3076bec35
- MD5 b0fed72eb020dce7c7cbe4804f7990c8
- SHA1 306bb7a3f86830dd9aa4161183e15a1a836cd95b
- SHA512 f5d4315116c8a6f7a0910b250981e383e3b9c6bfd488438b3ca670d6e851e15fbd728e63f0122f0da1bc8f46a52f2aefb25330a2e39bdef3fd340a01fac4ff3a
- SSDEEP 768:+00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDwoT6cBJhFd/B5x:+00URPnKfZrT2DawRR8JfP3tZB355B/L
- TLSH T112738E467881C4B2D80054B41826C6929FBFAD1257A5C0CBFB993E7E9F313DB893938D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_b0fed72eb020dce7c7cbe4804f7990c8_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_b0fed72eb020dce7c7cbe4804f7990c8_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260706-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_b0fed72eb020dce7c7cbe4804f7990c8_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 72KB
- SHA256 5805e670e60ef8096a4dd62fa1ba1fedb81cf3cce1c207b31f0532f3076bec35
- MD5 b0fed72eb020dce7c7cbe4804f7990c8
- SHA1 306bb7a3f86830dd9aa4161183e15a1a836cd95b
- SHA512 f5d4315116c8a6f7a0910b250981e383e3b9c6bfd488438b3ca670d6e851e15fbd728e63f0122f0da1bc8f46a52f2aefb25330a2e39bdef3fd340a01fac4ff3a
- SSDEEP 768:+00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDwoT6cBJhFd/B5x:+00URPnKfZrT2DawRR8JfP3tZB355B/L
- TLSH T112738E467881C4B2D80054B41826C6929FBFAD1257A5C0CBFB993E7E9F313DB893938D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory