General
- Target 2026-07-11_91b8843119c7975bd5ae81011f44c5a5_amadey_elex_redline-stealer_smoke-loader_stealc_stop
- Size 122KB
- Sample260711-gh7dbact8q
- SHA256 b5ae139b37cd9a5571633ce336cd9ecd8db5ce88bfe7c29fa4de250cd7e56d99
- MD5 91b8843119c7975bd5ae81011f44c5a5
- SHA1 71d50f1cccb953c8eececea30a44bac3231a980c
- SHA512 819d66928e11b2c8ed39f0da5ada5c6cf91f05e97e86a316ba2a802fbf6e3377f0d109252783e3a85b8adab87d50b33c92c21d96c5ff318e1bae63ac7c916fca
- SSDEEP 1536:DVWBc1CrYrkyeVbQmFG8V7lu7rzhbDssB8hkxrUN/bpsYTk5qUiswtsS:D0HxlavBxE/bpsqk5JJS
- TLSH T13EC38D117941C073C8469931052AF7A1AF7D7A3226B9A5C3F35D1BBE5FB02D06A3D28B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-11_91b8843119c7975bd5ae81011f44c5a5_amadey_elex_redline-stealer_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-11_91b8843119c7975bd5ae81011f44c5a5_amadey_elex_redline-stealer_smoke-loader_stealc_stop.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_91b8843119c7975bd5ae81011f44c5a5_amadey_elex_redline-stealer_smoke-loader_stealc_stop
- Size 122KB
- SHA256 b5ae139b37cd9a5571633ce336cd9ecd8db5ce88bfe7c29fa4de250cd7e56d99
- MD5 91b8843119c7975bd5ae81011f44c5a5
- SHA1 71d50f1cccb953c8eececea30a44bac3231a980c
- SHA512 819d66928e11b2c8ed39f0da5ada5c6cf91f05e97e86a316ba2a802fbf6e3377f0d109252783e3a85b8adab87d50b33c92c21d96c5ff318e1bae63ac7c916fca
- SSDEEP 1536:DVWBc1CrYrkyeVbQmFG8V7lu7rzhbDssB8hkxrUN/bpsYTk5qUiswtsS:D0HxlavBxE/bpsqk5JJS
- TLSH T13EC38D117941C073C8469931052AF7A1AF7D7A3226B9A5C3F35D1BBE5FB02D06A3D28B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.