General
- Target 2026-07-19_0ffffce46d2b11d6172508eaa752a953_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 72KB
- Sample260720-b913qaew2v
- SHA256 20517b71a71412fc97f3f27fa0dc10eea19849d10978698b91b067af0547da6f
- MD5 0ffffce46d2b11d6172508eaa752a953
- SHA1 cf48bc956444daf224fe2019b13ec15540b39d83
- SHA512 8ccc5295d6a3fb7c5401ce78a76b937b3c1190fbcdff7b21dc0b0e302fb54c90b36308933e267e7f27be547a6ae593996b0bb6d49f1efc48766f09d4c2ba9b28
- SSDEEP 768:+00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDwST6cBJhFd/B5U:+00URPnKfZrT2DawRR8JfP3HZB355B/i
- TLSH T137738E467891C4B2D80054B41426C6929F7FAD2257A5C0CBFB993E7E9F313DB893938E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-19_0ffffce46d2b11d6172508eaa752a953_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-19_0ffffce46d2b11d6172508eaa752a953_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_0ffffce46d2b11d6172508eaa752a953_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 72KB
- SHA256 20517b71a71412fc97f3f27fa0dc10eea19849d10978698b91b067af0547da6f
- MD5 0ffffce46d2b11d6172508eaa752a953
- SHA1 cf48bc956444daf224fe2019b13ec15540b39d83
- SHA512 8ccc5295d6a3fb7c5401ce78a76b937b3c1190fbcdff7b21dc0b0e302fb54c90b36308933e267e7f27be547a6ae593996b0bb6d49f1efc48766f09d4c2ba9b28
- SSDEEP 768:+00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDwST6cBJhFd/B5U:+00URPnKfZrT2DawRR8JfP3HZB355B/i
- TLSH T137738E467891C4B2D80054B41426C6929F7FAD2257A5C0CBFB993E7E9F313DB893938E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory