General
- Target 2026-07-09_3462f8425063942d29e46710738ec4f8_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 1.6MB
- Sample260709-sa124scv5q
- SHA256 14a49d01878b7ddbd4d5929e1374882986acbb496b6f306ff401d033a6ec83e8
- MD5 3462f8425063942d29e46710738ec4f8
- SHA1 fba03e3d3afb3a4015208693b5f592e056384dab
- SHA512 18c55a4a554fdbe8defcb581a5eabdd7e22247c3c0ba1d0bd2d3f5c9fe842006e2bc44bd334efc06dd25c0608f41151df9864654c0bdb39a82714c6e14321a11
- SSDEEP 24576:t3nFoAlaK9Na54GX/T9+Q9x/WnSyhbzv8O0YSz:WK9NaH/rWSytLd+
- TLSH T1C8857D136E9C4032E0AF3D315D61C7D96A25BD119A12BE9A5DC07E8DFBF15C0B92E232
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_3462f8425063942d29e46710738ec4f8_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_3462f8425063942d29e46710738ec4f8_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win11ltsc2024-20260706-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_3462f8425063942d29e46710738ec4f8_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 1.6MB
- SHA256 14a49d01878b7ddbd4d5929e1374882986acbb496b6f306ff401d033a6ec83e8
- MD5 3462f8425063942d29e46710738ec4f8
- SHA1 fba03e3d3afb3a4015208693b5f592e056384dab
- SHA512 18c55a4a554fdbe8defcb581a5eabdd7e22247c3c0ba1d0bd2d3f5c9fe842006e2bc44bd334efc06dd25c0608f41151df9864654c0bdb39a82714c6e14321a11
- SSDEEP 24576:t3nFoAlaK9Na54GX/T9+Q9x/WnSyhbzv8O0YSz:WK9NaH/rWSytLd+
- TLSH T1C8857D136E9C4032E0AF3D315D61C7D96A25BD119A12BE9A5DC07E8DFBF15C0B92E232
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.