General
- Target 2026-07-19_58114d3ad122c27c2b291bb3025495b4_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 72KB
- Sample260719-dr6atsdv6w
- SHA256 16703d5d62e6c5d5b319bd8e5b00c3af985f00212968f14dcae1726ee2eb0b47
- MD5 58114d3ad122c27c2b291bb3025495b4
- SHA1 a700dd5055e8e4b383673394cc7d90d2cfac14de
- SHA512 b5b7ff5093e0bb6e2d087df850c5a35526c824496a1f3ecd0863d2e4fdc49eefe1754fbd6b3e3d0756047f0f7e18408c4a6e5ea22cc3949fbbd818815cc9508c
- SSDEEP 768:+00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDwiT6cBJhFd/B5Y:+00URPnKfZrT2DawRR8JfP3HZB355B/
- TLSH T1B9738E467881C4B2D80054B41826C6929FBFAD1257A5D0CBFB993E7E9F313DB893938D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-19_58114d3ad122c27c2b291bb3025495b4_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-19_58114d3ad122c27c2b291bb3025495b4_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_58114d3ad122c27c2b291bb3025495b4_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 72KB
- SHA256 16703d5d62e6c5d5b319bd8e5b00c3af985f00212968f14dcae1726ee2eb0b47
- MD5 58114d3ad122c27c2b291bb3025495b4
- SHA1 a700dd5055e8e4b383673394cc7d90d2cfac14de
- SHA512 b5b7ff5093e0bb6e2d087df850c5a35526c824496a1f3ecd0863d2e4fdc49eefe1754fbd6b3e3d0756047f0f7e18408c4a6e5ea22cc3949fbbd818815cc9508c
- SSDEEP 768:+00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDwiT6cBJhFd/B5Y:+00URPnKfZrT2DawRR8JfP3HZB355B/
- TLSH T1B9738E467881C4B2D80054B41826C6929FBFAD1257A5D0CBFB993E7E9F313DB893938D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Adds Run key to start application
Drops file in System32 directory