General
- Target 2026-07-23_6be7a670ab53e85308c9e364abf556ab_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 65KB
- Sample260723-c97e6sdj5z
- SHA256 5d7a25f3924327cb078858c26a3f04bd68d918c80dc969a301790c385b75dc65
- MD5 6be7a670ab53e85308c9e364abf556ab
- SHA1 107a455163f7fc2d31e88490c438a0caac9d08f9
- SHA512 21af6317a82b7c5ce722800b5d555470ed413b6e5d81582b6a175ae3aeea964d81da4a2f414f22ab5f964c393afaf90819c6e61edfe1f95936929380103aa6cc
- SSDEEP 768:b00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDwtT6cBJhFd/B5C:b00URPnKfZrT2DawRR8JfP34ZB355B/E
- TLSH T1BE639E577890C4B2D80060B41826C6929F6FAD2147B5C0C7BB993E7E9F323DB993934E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_6be7a670ab53e85308c9e364abf556ab_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_6be7a670ab53e85308c9e364abf556ab_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_6be7a670ab53e85308c9e364abf556ab_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 65KB
- SHA256 5d7a25f3924327cb078858c26a3f04bd68d918c80dc969a301790c385b75dc65
- MD5 6be7a670ab53e85308c9e364abf556ab
- SHA1 107a455163f7fc2d31e88490c438a0caac9d08f9
- SHA512 21af6317a82b7c5ce722800b5d555470ed413b6e5d81582b6a175ae3aeea964d81da4a2f414f22ab5f964c393afaf90819c6e61edfe1f95936929380103aa6cc
- SSDEEP 768:b00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDwtT6cBJhFd/B5C:b00URPnKfZrT2DawRR8JfP34ZB355B/E
- TLSH T1BE639E577890C4B2D80060B41826C6929F6FAD2147B5C0C7BB993E7E9F323DB993934E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory