General
- Target 2026-07-22_103ad0b04ad00f9ad5dd0492b62c5412_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 72KB
- Sample260723-aqfr1aed37
- SHA256 0109e246dba7e68f933c8191b9c6d6e96ccb083b86cc05f20e078dd8b12fee92
- MD5 103ad0b04ad00f9ad5dd0492b62c5412
- SHA1 c2a5a4b9e7a66b717f5445f057834af1d7c644f2
- SHA512 bbec088e9017ceeab074b6a76732e2f3e1836c9a14674e00aaa286a78eae2bc538d848224e9ae33a0758859b1da441c54e6d90766f98cc9f6c78f2eac9b86a9a
- SSDEEP 768:+00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDwpT6cBJhFd/B5Y:+00URPnKfZrT2DawRR8JfP3gZB355B/
- TLSH T136738E467881C4B2D80054B41826C6929FBFAD1257A5D0CBFB993E7E9F313DB893938D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-22_103ad0b04ad00f9ad5dd0492b62c5412_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_103ad0b04ad00f9ad5dd0492b62c5412_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_103ad0b04ad00f9ad5dd0492b62c5412_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 72KB
- SHA256 0109e246dba7e68f933c8191b9c6d6e96ccb083b86cc05f20e078dd8b12fee92
- MD5 103ad0b04ad00f9ad5dd0492b62c5412
- SHA1 c2a5a4b9e7a66b717f5445f057834af1d7c644f2
- SHA512 bbec088e9017ceeab074b6a76732e2f3e1836c9a14674e00aaa286a78eae2bc538d848224e9ae33a0758859b1da441c54e6d90766f98cc9f6c78f2eac9b86a9a
- SSDEEP 768:+00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDwpT6cBJhFd/B5Y:+00URPnKfZrT2DawRR8JfP3gZB355B/
- TLSH T136738E467881C4B2D80054B41826C6929FBFAD1257A5D0CBFB993E7E9F313DB893938D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory