General
- Target 2026-07-08_1214783a973fcebf0fb09ccae3f77195_amadey_elex_redline-stealer_smoke-loader_stealc_tofsee
- Size 293KB
- Sample260708-xaf46af141
- SHA256 a6ca86f63fde14a02b03e6a6c290e90b7027afb7604b79e83ac3a51a42697ec1
- MD5 1214783a973fcebf0fb09ccae3f77195
- SHA1 06856bfc5e74e1e3fa2d7ba7be7f07d9b7e8aa4b
- SHA512 ff5f08f6164e0d6988d6d30024a454bbef785b28afb639c2a5e50ef187af9efe8c2f3e0263a82c7069e8e1b3195408d14f25eb344d4c7dbe4416b4538f393035
- SSDEEP 6144:eMhr1bIfNXh4S5s/zk1/XzRg+F+h8Am6SdSS:TUXDG7aXzRgutR6SdSS
- TLSH T126546B15799181ECF39BD63D8A58C019C63DF9781B303CEB62D46ED6296B3C301B62DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_1214783a973fcebf0fb09ccae3f77195_amadey_elex_redline-stealer_smoke-loader_stealc_tofsee.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_1214783a973fcebf0fb09ccae3f77195_amadey_elex_redline-stealer_smoke-loader_stealc_tofsee.exe
Resource
win11ltsc2024-20260706-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_1214783a973fcebf0fb09ccae3f77195_amadey_elex_redline-stealer_smoke-loader_stealc_tofsee
- Size 293KB
- SHA256 a6ca86f63fde14a02b03e6a6c290e90b7027afb7604b79e83ac3a51a42697ec1
- MD5 1214783a973fcebf0fb09ccae3f77195
- SHA1 06856bfc5e74e1e3fa2d7ba7be7f07d9b7e8aa4b
- SHA512 ff5f08f6164e0d6988d6d30024a454bbef785b28afb639c2a5e50ef187af9efe8c2f3e0263a82c7069e8e1b3195408d14f25eb344d4c7dbe4416b4538f393035
- SSDEEP 6144:eMhr1bIfNXh4S5s/zk1/XzRg+F+h8Am6SdSS:TUXDG7aXzRgutR6SdSS
- TLSH T126546B15799181ECF39BD63D8A58C019C63DF9781B303CEB62D46ED6296B3C301B62DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.