General
- Target 2026-07-21_58adf61e662d8f8e7693d725cc953ebd_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 72KB
- Sample260721-2d99mastfw
- SHA256 c580f11a4ac89b686ffc781542747830b293a6db1344beeccf5cece635a48e44
- MD5 58adf61e662d8f8e7693d725cc953ebd
- SHA1 8dc8c79313cb729e80eb01a1a3c6ce2fd050b333
- SHA512 142ccd5dd81b0082b96795ae1bc7b8adb7fa421db64fb1d0887bce255a504275118867440b99b9aa327651e784ca5dd5436695def88847a2d2e491d909485cad
- SSDEEP 768:+00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDwMT6cBJhFd/B5x:+00URPnKfZrT2DawRR8JfP3VZB355B/L
- TLSH T14B738E467881C4B2D80054B41426C6929FBFAD1257A5D0CBFB993E7E9F313DB893938D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-21_58adf61e662d8f8e7693d725cc953ebd_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-21_58adf61e662d8f8e7693d725cc953ebd_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-21_58adf61e662d8f8e7693d725cc953ebd_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 72KB
- SHA256 c580f11a4ac89b686ffc781542747830b293a6db1344beeccf5cece635a48e44
- MD5 58adf61e662d8f8e7693d725cc953ebd
- SHA1 8dc8c79313cb729e80eb01a1a3c6ce2fd050b333
- SHA512 142ccd5dd81b0082b96795ae1bc7b8adb7fa421db64fb1d0887bce255a504275118867440b99b9aa327651e784ca5dd5436695def88847a2d2e491d909485cad
- SSDEEP 768:+00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDwMT6cBJhFd/B5x:+00URPnKfZrT2DawRR8JfP3VZB355B/L
- TLSH T14B738E467881C4B2D80054B41426C6929FBFAD1257A5D0CBFB993E7E9F313DB893938D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory