General
- Target 2026-07-08_7229ab2ab498a1da4f8ac80723bc549e_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 98KB
- Sample260708-e5lc9abw3l
- SHA256 cbda93fb29b6230dd08c0b1fbc296a9afa547f75e35905d792820a8d75611194
- MD5 7229ab2ab498a1da4f8ac80723bc549e
- SHA1 504b01128b0b15092b572669e929496908dcd9fa
- SHA512 0cf87bd13c31387c714eff1eaf9034f8e54b6a330ea873c7533198389b4a89959d58478e1585358efc2769a4cfe798da2089c5e3e74c65c8677a7f9f98944f9b
- SSDEEP 1536:YrER9ieUOc+/RAhDcbPLXbbsAyQIrZoQlgyJ0TrES3:GER8Y6hDDAyQIrZobyJa13
- TLSH T118A36D137B42D032D82048710456C7966B7DFD221A75E99373963F7E2E323D1AF2A74A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_7229ab2ab498a1da4f8ac80723bc549e_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_7229ab2ab498a1da4f8ac80723bc549e_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win11ltsc2024-20260706-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_7229ab2ab498a1da4f8ac80723bc549e_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 98KB
- SHA256 cbda93fb29b6230dd08c0b1fbc296a9afa547f75e35905d792820a8d75611194
- MD5 7229ab2ab498a1da4f8ac80723bc549e
- SHA1 504b01128b0b15092b572669e929496908dcd9fa
- SHA512 0cf87bd13c31387c714eff1eaf9034f8e54b6a330ea873c7533198389b4a89959d58478e1585358efc2769a4cfe798da2089c5e3e74c65c8677a7f9f98944f9b
- SSDEEP 1536:YrER9ieUOc+/RAhDcbPLXbbsAyQIrZoQlgyJ0TrES3:GER8Y6hDDAyQIrZobyJa13
- TLSH T118A36D137B42D032D82048710456C7966B7DFD221A75E99373963F7E2E323D1AF2A74A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies visibility of file extensions in Explorer
-
Modifies visibility of hidden/system files in Explorer
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.