General
- Target 2026-07-12_750a001b94e09c7ce9090cf3c9e74329_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 65KB
- Sample260712-k7hm2aft8q
- SHA256 f13b3f6287f000bacf209842306111b127e3dcb416a69945b68a9f501992a847
- MD5 750a001b94e09c7ce9090cf3c9e74329
- SHA1 c2fe84a9310e4a593ed8eafc1f58f6ef811b91f3
- SHA512 883e17dbac77074973193fed58b2a9f842bd04549e718346accee15a78124133a1564da8a27d3c06e42b5a8c6a61fb5f58d45b7183a07d375a1d5d61b18402c9
- SSDEEP 768:b00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDweT6cBJhFd/B5C:b00URPnKfZrT2DawRR8JfP3XZB355B/E
- TLSH T14B639E567890C4B2D80060B41826C6929F6FAD2147B5C0C7BB993E7E9F323DB993934E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_750a001b94e09c7ce9090cf3c9e74329_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_750a001b94e09c7ce9090cf3c9e74329_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_750a001b94e09c7ce9090cf3c9e74329_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 65KB
- SHA256 f13b3f6287f000bacf209842306111b127e3dcb416a69945b68a9f501992a847
- MD5 750a001b94e09c7ce9090cf3c9e74329
- SHA1 c2fe84a9310e4a593ed8eafc1f58f6ef811b91f3
- SHA512 883e17dbac77074973193fed58b2a9f842bd04549e718346accee15a78124133a1564da8a27d3c06e42b5a8c6a61fb5f58d45b7183a07d375a1d5d61b18402c9
- SSDEEP 768:b00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDweT6cBJhFd/B5C:b00URPnKfZrT2DawRR8JfP3XZB355B/E
- TLSH T14B639E567890C4B2D80060B41826C6929F6FAD2147B5C0C7BB993E7E9F323DB993934E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory