General
- Target 2026-07-15_e8ad476f2dc1023f40209c7b68ed6876_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 72KB
- Sample260715-jacj3set8j
- SHA256 78db17cd8873fdf93b01e2f89e7a322fe31cd6125dae8f04626ded01be6d800d
- MD5 e8ad476f2dc1023f40209c7b68ed6876
- SHA1 49465e6beb3471215d0bbbb0d1edec02729057a2
- SHA512 04ad341a36a2a36d16037f629139d99865e7c6b03fa6a9cfc42adbc21a781981ba9a5dfd988783e28319d5ba44f87b6e86a3db43f3a4cf9ebce3c0b3aa82c53a
- SSDEEP 768:+00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDwfT6cBJhFd/B5Y:+00URPnKfZrT2DawRR8JfP3qZB355B/
- TLSH T1D3738E467881C4B2D80054B41426C6929FBFAD1257A5D0CBFB993E7E9F313DB893938D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-15_e8ad476f2dc1023f40209c7b68ed6876_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_e8ad476f2dc1023f40209c7b68ed6876_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_e8ad476f2dc1023f40209c7b68ed6876_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 72KB
- SHA256 78db17cd8873fdf93b01e2f89e7a322fe31cd6125dae8f04626ded01be6d800d
- MD5 e8ad476f2dc1023f40209c7b68ed6876
- SHA1 49465e6beb3471215d0bbbb0d1edec02729057a2
- SHA512 04ad341a36a2a36d16037f629139d99865e7c6b03fa6a9cfc42adbc21a781981ba9a5dfd988783e28319d5ba44f87b6e86a3db43f3a4cf9ebce3c0b3aa82c53a
- SSDEEP 768:+00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDwfT6cBJhFd/B5Y:+00URPnKfZrT2DawRR8JfP3qZB355B/
- TLSH T1D3738E467881C4B2D80054B41426C6929FBFAD1257A5D0CBFB993E7E9F313DB893938D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory