General
- Target 2026-07-19_2a7b97d88342f4e2c6e4012ad2be6eac_amadey_elex_karagany_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 11.4MB
- Sample260720-b4yqeaet3z
- SHA256 5f517707e606a91d9dd8e7a55e27e651afe287df779ff1a03c3616ff53b32bc2
- MD5 2a7b97d88342f4e2c6e4012ad2be6eac
- SHA1 ab0de6bf12e52f9aafbb42f32d8af72f1afdb523
- SHA512 138c58b1794810851d026ae59653d19222612345e1d48316d3cf4cc190b815bf61673db3ef1a108736d469a142a5907810a7b444eea19e6161d513269a0e4b75
- SSDEEP 196608:mhJ7R18EMmu6puseV4ZJ7Ia4cUW6Hk4Q5aeISlE9bx6wuJ7lHXYOQcDaBcDa+k/6:mhJ7jMmJiOSTQodAm4wug5cOBcO+i7G
- TLSH T11FC63384F193C87AE67A86300A295EF58D737E218BDDD6E77FD068AC4EB15E04232185
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-19_2a7b97d88342f4e2c6e4012ad2be6eac_amadey_elex_karagany_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_2a7b97d88342f4e2c6e4012ad2be6eac_amadey_elex_karagany_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 11.4MB
- SHA256 5f517707e606a91d9dd8e7a55e27e651afe287df779ff1a03c3616ff53b32bc2
- MD5 2a7b97d88342f4e2c6e4012ad2be6eac
- SHA1 ab0de6bf12e52f9aafbb42f32d8af72f1afdb523
- SHA512 138c58b1794810851d026ae59653d19222612345e1d48316d3cf4cc190b815bf61673db3ef1a108736d469a142a5907810a7b444eea19e6161d513269a0e4b75
- SSDEEP 196608:mhJ7R18EMmu6puseV4ZJ7Ia4cUW6Hk4Q5aeISlE9bx6wuJ7lHXYOQcDaBcDa+k/6:mhJ7jMmJiOSTQodAm4wug5cOBcO+i7G
- TLSH T11FC63384F193C87AE67A86300A295EF58D737E218BDDD6E77FD068AC4EB15E04232185
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.