General
- Target 2026-07-11_e0992c0832dd73f794259e7f1a6cee6d_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 896KB
- Sample260711-sc6elsds4j
- SHA256 9c4e592c04a47a87146320c85d043044db988816e1c07229ce346f0402e0addc
- MD5 e0992c0832dd73f794259e7f1a6cee6d
- SHA1 9e71a6c7594008e580253edfa8e1227c4f523e99
- SHA512 e53082cba18ec08ee27ae34e233509e4fe22aa6de1c3756048072c1fab55b5bbd8ba26ddfb3f5bbb583146e563165c60db994c1aa68c18fc92bc0353079d6afa
- SSDEEP 12288:41O88+f1OM+90md3/94A2p8GT1O88+f1OM+90md3/94A2p8GS:41H821JWx/WnT1H821JWx/WnS
- TLSH T12C159D17B6D080F6E592517188AA9A52FB36F415177187CF0B10CA6A6F337D29F3A30B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-11_e0992c0832dd73f794259e7f1a6cee6d_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-11_e0992c0832dd73f794259e7f1a6cee6d_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win11ltsc2024-20260710-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_e0992c0832dd73f794259e7f1a6cee6d_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 896KB
- SHA256 9c4e592c04a47a87146320c85d043044db988816e1c07229ce346f0402e0addc
- MD5 e0992c0832dd73f794259e7f1a6cee6d
- SHA1 9e71a6c7594008e580253edfa8e1227c4f523e99
- SHA512 e53082cba18ec08ee27ae34e233509e4fe22aa6de1c3756048072c1fab55b5bbd8ba26ddfb3f5bbb583146e563165c60db994c1aa68c18fc92bc0353079d6afa
- SSDEEP 12288:41O88+f1OM+90md3/94A2p8GT1O88+f1OM+90md3/94A2p8GS:41H821JWx/WnT1H821JWx/WnS
- TLSH T12C159D17B6D080F6E592517188AA9A52FB36F415177187CF0B10CA6A6F337D29F3A30B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1