General
- Target 2026-07-20_a0eba1112ce101540c906d9fdb8af3d0_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 72KB
- Sample260720-ng72sags5m
- SHA256 b1e8fbdf0b74edfad12a44238934b66dbdbd36b980d246a5c8b8084281af55af
- MD5 a0eba1112ce101540c906d9fdb8af3d0
- SHA1 02f3b3e0707d69c33b311d6d53a6157ae68deff8
- SHA512 eb6138d3272c31eda00c71d56e5666e36f8fdeb57222e979f78b5418e11bf27038a3f51b628566eb34ad91f42196fa0233b11c4b95062e866d48ac9fcbeeb503
- SSDEEP 768:+00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDwlT6cBJhFd/B5Y:+00URPnKfZrT2DawRR8JfP3AZB355B/
- TLSH T143738E467881C4B2D80054B41826C6929FBFAD1257A5D0CBFB993E7E9F313DB893938D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_a0eba1112ce101540c906d9fdb8af3d0_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_a0eba1112ce101540c906d9fdb8af3d0_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_a0eba1112ce101540c906d9fdb8af3d0_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 72KB
- SHA256 b1e8fbdf0b74edfad12a44238934b66dbdbd36b980d246a5c8b8084281af55af
- MD5 a0eba1112ce101540c906d9fdb8af3d0
- SHA1 02f3b3e0707d69c33b311d6d53a6157ae68deff8
- SHA512 eb6138d3272c31eda00c71d56e5666e36f8fdeb57222e979f78b5418e11bf27038a3f51b628566eb34ad91f42196fa0233b11c4b95062e866d48ac9fcbeeb503
- SSDEEP 768:+00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDwlT6cBJhFd/B5Y:+00URPnKfZrT2DawRR8JfP3AZB355B/
- TLSH T143738E467881C4B2D80054B41826C6929FBFAD1257A5D0CBFB993E7E9F313DB893938D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory