General
- Target 2026-07-08_419b29b04566ce4c7f914086c082095c_amadey_elex_redline-stealer_smoke-loader_stealc_tofsee
- Size 367KB
- Sample260708-wras2aes5l
- SHA256 bd1d0e884c5e7faee4d09781ca4eda5bfe53040dc6c52b66a99535ea4dd72391
- MD5 419b29b04566ce4c7f914086c082095c
- SHA1 a6ede0b285b37c93aa981eab76a49247bded472e
- SHA512 f4f0fdc79016cb8b81d9d874951af793890f610a841fc98b84f383fa5819d2db4ad576b61ae54a12dbde785c5518ee3b0e65e2d689b459269f96b845a6c86cb3
- SSDEEP 6144:GMhr1bIfNXh4S5s/zk1/XzRg+Flh6XAm6SdSS:bUXDG7aXzRguWXR6SdSS
- TLSH T169846B15698185ECF35BD63D8A58C019C63DFD780B303CEB62D56ED62A6B3C301B62DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_419b29b04566ce4c7f914086c082095c_amadey_elex_redline-stealer_smoke-loader_stealc_tofsee.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_419b29b04566ce4c7f914086c082095c_amadey_elex_redline-stealer_smoke-loader_stealc_tofsee.exe
Resource
win11ltsc2024-20260706-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_419b29b04566ce4c7f914086c082095c_amadey_elex_redline-stealer_smoke-loader_stealc_tofsee
- Size 367KB
- SHA256 bd1d0e884c5e7faee4d09781ca4eda5bfe53040dc6c52b66a99535ea4dd72391
- MD5 419b29b04566ce4c7f914086c082095c
- SHA1 a6ede0b285b37c93aa981eab76a49247bded472e
- SHA512 f4f0fdc79016cb8b81d9d874951af793890f610a841fc98b84f383fa5819d2db4ad576b61ae54a12dbde785c5518ee3b0e65e2d689b459269f96b845a6c86cb3
- SSDEEP 6144:GMhr1bIfNXh4S5s/zk1/XzRg+Flh6XAm6SdSS:bUXDG7aXzRguWXR6SdSS
- TLSH T169846B15698185ECF35BD63D8A58C019C63DFD780B303CEB62D56ED62A6B3C301B62DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.