General
- Target 2026-07-09_b1178425bfe7638491f3278475e74334_amadey_elex_hijackloader_redline-stealer_rhadamanthys_smoke-loader_stop_swisyn
- Size 186KB
- Sample260709-d96djsct4l
- SHA256 1899b2887163e7a8ea6abffa27b61032e8b527c4b7f72ba00fd71beb9fb4551f
- MD5 b1178425bfe7638491f3278475e74334
- SHA1 e81218fd3d23207a8667476c7a0f38674de32541
- SHA512 57f06ca8f5eb96e81ee5e082367e28503598cafb7c80d2a8ebb9ff52e58293f60f8a28ee54181b9ec0bf46f5222ec7420b8d536395dc2afad813d3e957007e60
- SSDEEP 3072:4VqoCl/YgjxEufVU0TbTyDDalQliLZciRI/hk4WY:4sLqdufVUNDa3LZiqU
- TLSH T16C143C13AE505C3BD81289F16C75CBAAF92A5E3507E46C073756FB542A7228372F821F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_b1178425bfe7638491f3278475e74334_amadey_elex_hijackloader_redline-stealer_rhadamanthys_smoke-loader_stop_swisyn.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_b1178425bfe7638491f3278475e74334_amadey_elex_hijackloader_redline-stealer_rhadamanthys_smoke-loader_stop_swisyn.exe
Resource
win11ltsc2024-20260706-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_b1178425bfe7638491f3278475e74334_amadey_elex_hijackloader_redline-stealer_rhadamanthys_smoke-loader_stop_swisyn
- Size 186KB
- SHA256 1899b2887163e7a8ea6abffa27b61032e8b527c4b7f72ba00fd71beb9fb4551f
- MD5 b1178425bfe7638491f3278475e74334
- SHA1 e81218fd3d23207a8667476c7a0f38674de32541
- SHA512 57f06ca8f5eb96e81ee5e082367e28503598cafb7c80d2a8ebb9ff52e58293f60f8a28ee54181b9ec0bf46f5222ec7420b8d536395dc2afad813d3e957007e60
- SSDEEP 3072:4VqoCl/YgjxEufVU0TbTyDDalQliLZciRI/hk4WY:4sLqdufVUNDa3LZiqU
- TLSH T16C143C13AE505C3BD81289F16C75CBAAF92A5E3507E46C073756FB542A7228372F821F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory