General
- Target 2026-07-23_f942dafd0bb75718fdb925e8965ead6a_amadey_elex_redline-stealer_rhadamanthys_stealc_stop_swisyn
- Size 576KB
- Sample260723-bc5dwabr3s
- SHA256 2f3b6cc96358b95ff8062c01ada0d0a77b81837da07d4945d394a44c74f8830e
- MD5 f942dafd0bb75718fdb925e8965ead6a
- SHA1 2ae1dfdfa0309d8f6b57f987f27b19f0978d9281
- SHA512 bf633de211c6960e3ae7f2f726b537f7a54873b1c93df8c151fc77090eab9be3c7cd0515a8751bbff7796261d3098d79fb51ab51b8f489b4e4e57969d35bcf9b
- SSDEEP 6144:XsLqdufVUNDa595pV/5m+bcFpXrvXAY9OPI2AFWN6EtKhpOFgX5D20zrwqO8mKlI:cFUNDa/7+9iSFyQhAyJD7m1dAK8wEUz
- TLSH T192C49D12B790C433D41245B14565C7B67E367E351E66AA8BBBE0ABB81B312C2F63530F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_f942dafd0bb75718fdb925e8965ead6a_amadey_elex_redline-stealer_rhadamanthys_stealc_stop_swisyn.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_f942dafd0bb75718fdb925e8965ead6a_amadey_elex_redline-stealer_rhadamanthys_stealc_stop_swisyn.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_f942dafd0bb75718fdb925e8965ead6a_amadey_elex_redline-stealer_rhadamanthys_stealc_stop_swisyn
- Size 576KB
- SHA256 2f3b6cc96358b95ff8062c01ada0d0a77b81837da07d4945d394a44c74f8830e
- MD5 f942dafd0bb75718fdb925e8965ead6a
- SHA1 2ae1dfdfa0309d8f6b57f987f27b19f0978d9281
- SHA512 bf633de211c6960e3ae7f2f726b537f7a54873b1c93df8c151fc77090eab9be3c7cd0515a8751bbff7796261d3098d79fb51ab51b8f489b4e4e57969d35bcf9b
- SSDEEP 6144:XsLqdufVUNDa595pV/5m+bcFpXrvXAY9OPI2AFWN6EtKhpOFgX5D20zrwqO8mKlI:cFUNDa/7+9iSFyQhAyJD7m1dAK8wEUz
- TLSH T192C49D12B790C433D41245B14565C7B67E367E351E66AA8BBBE0ABB81B312C2F63530F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Modifies visibility of hidden/system files in Explorer
Executes dropped EXE
Adds Run key to start application
Drops file in System32 directory