General
- Target 2026-07-12_2de2a842e2b5e4a4ea555b7f69736147_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 1.3MB
- Sample260712-v3n95aev2q
- SHA256 3a1ec24126e12b92a75149aa77cff764b675bca385b6e294a7ccb7eccc5977d5
- MD5 2de2a842e2b5e4a4ea555b7f69736147
- SHA1 228f205132414c8ee0da1b3b4522a78e93a622b3
- SHA512 e12dc2e06bec2b0b59294a43a4127bc6bd0f79b0d275b82e74b420ff28359974259300826d09e9d59eee639b63c14cfdb9a232c9d28cec4c75a10abfcb295cb1
- SSDEEP 12288:1n0NPHi4FGyS0VTBG//sop9bw/W1wR/kjy6FtgQAdJsg0HjoMWo:FWCSnQ/tbw/2Mkjy6Fr7g0oo
- TLSH T1A15501217600D476F70A0B704855F5D04AAA4D7C2AD4E64FF6783E3AAA353D34AB728F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_2de2a842e2b5e4a4ea555b7f69736147_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_2de2a842e2b5e4a4ea555b7f69736147_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 1.3MB
- SHA256 3a1ec24126e12b92a75149aa77cff764b675bca385b6e294a7ccb7eccc5977d5
- MD5 2de2a842e2b5e4a4ea555b7f69736147
- SHA1 228f205132414c8ee0da1b3b4522a78e93a622b3
- SHA512 e12dc2e06bec2b0b59294a43a4127bc6bd0f79b0d275b82e74b420ff28359974259300826d09e9d59eee639b63c14cfdb9a232c9d28cec4c75a10abfcb295cb1
- SSDEEP 12288:1n0NPHi4FGyS0VTBG//sop9bw/W1wR/kjy6FtgQAdJsg0HjoMWo:FWCSnQ/tbw/2Mkjy6Fr7g0oo
- TLSH T1A15501217600D476F70A0B704855F5D04AAA4D7C2AD4E64FF6783E3AAA353D34AB728F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1