General
- Target 2026-07-08_d332c8d900bf66d0735817750f3d45a2_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 98KB
- Sample260708-ernw8abs8j
- SHA256 0d40482134b9727120ce609d26c7f6ecf9f1ab62eb8f94a7f15b9517471b0332
- MD5 d332c8d900bf66d0735817750f3d45a2
- SHA1 3470bac7249ba343e56d7a13a977a9f49b3add35
- SHA512 7fc9c142bda37e78504cace255a941cd55f955b242bf0b4d97ef6153580bfe6ceb4757ff2ec28ce7688266e133a5232130c2a55f54a25230123ee6c2e1b2c922
- SSDEEP 1536:YrER9ieUOc+/RAhDcDPLXbbsAyQIrZBQlgyJ0TWS3:GER8Y6hD7AyQIrZBbyJK3
- TLSH T1ADA36C137B42D032D81048710856C7966B7DFD221A79E99373963F7E2E323D1AF2A74A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_d332c8d900bf66d0735817750f3d45a2_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_d332c8d900bf66d0735817750f3d45a2_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win11ltsc2024-20260706-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_d332c8d900bf66d0735817750f3d45a2_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 98KB
- SHA256 0d40482134b9727120ce609d26c7f6ecf9f1ab62eb8f94a7f15b9517471b0332
- MD5 d332c8d900bf66d0735817750f3d45a2
- SHA1 3470bac7249ba343e56d7a13a977a9f49b3add35
- SHA512 7fc9c142bda37e78504cace255a941cd55f955b242bf0b4d97ef6153580bfe6ceb4757ff2ec28ce7688266e133a5232130c2a55f54a25230123ee6c2e1b2c922
- SSDEEP 1536:YrER9ieUOc+/RAhDcDPLXbbsAyQIrZBQlgyJ0TWS3:GER8Y6hD7AyQIrZBbyJK3
- TLSH T1ADA36C137B42D032D81048710856C7966B7DFD221A79E99373963F7E2E323D1AF2A74A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.