General
- Target 2026-07-23_55ed2cb31093e45a02a29b36bbf57f4d_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 309KB
- Sample260724-agrg5szblh
- SHA256 00123fc9f51240ee67db747ed9d08eb1533aed33b7c7a2e0cf880947a1bd25e5
- MD5 55ed2cb31093e45a02a29b36bbf57f4d
- SHA1 0f1bf48310c5d9d1f7e63027218e64b023b2f498
- SHA512 7b8cf955cac7ed18d18b85cafc36dabc0abac888cb765fd4cb276c2c9fc72b5ef4a86058256f42419f16a78df7419c7d6ba4e5a55556e2966346a666f3e127cb
- SSDEEP 3072:pwn6c2VESz5xZBbB2mcKfqjnpnqMO9Hmcbo9Tmnn/BqBzVt1saVYybmZ:pwn6BVNhbPCjn1iHmSRnQRVt1saVrb
- TLSH T1C864D0537B52D072C81108710816C3956E6EFE222A36ED9373523F7E1E323E1AF2674A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_55ed2cb31093e45a02a29b36bbf57f4d_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_55ed2cb31093e45a02a29b36bbf57f4d_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_55ed2cb31093e45a02a29b36bbf57f4d_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 309KB
- SHA256 00123fc9f51240ee67db747ed9d08eb1533aed33b7c7a2e0cf880947a1bd25e5
- MD5 55ed2cb31093e45a02a29b36bbf57f4d
- SHA1 0f1bf48310c5d9d1f7e63027218e64b023b2f498
- SHA512 7b8cf955cac7ed18d18b85cafc36dabc0abac888cb765fd4cb276c2c9fc72b5ef4a86058256f42419f16a78df7419c7d6ba4e5a55556e2966346a666f3e127cb
- SSDEEP 3072:pwn6c2VESz5xZBbB2mcKfqjnpnqMO9Hmcbo9Tmnn/BqBzVt1saVYybmZ:pwn6BVNhbPCjn1iHmSRnQRVt1saVrb
- TLSH T1C864D0537B52D072C81108710816C3956E6EFE222A36ED9373523F7E1E323E1AF2674A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Modifies firewall policy service
Modifies visibility of file extensions in Explorer
Modifies visibility of hidden/system files in Explorer
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
2Hidden Files and Directories
2Impair Defenses
1Disable or Modify System Firewall
1Modify Registry
3