General
- Target 2026-07-24_9591d2dd1adcc15e47e6d6b51feea6cc_amadey_elex_redline-stealer_smoke-loader_stealc_stop
- Size 123KB
- Sample260724-k2swtav1fz
- SHA256 e6fea7870a9027ae9982e93fa0cb10fdbc7bb3bc3e783847fb8ffc5ed4ec4a62
- MD5 9591d2dd1adcc15e47e6d6b51feea6cc
- SHA1 0db99dba725c62bdd8dba6f1928aa5b9ebf0fb92
- SHA512 cb89fc3365926f1648c17918615ef53d869b983fcdd190e9640f36330b157935c4758d92a8430c4ff8aba303cf6f306b20e41a96e79231eb2cbc6e93c5345df1
- SSDEEP 1536:iqGFRfepwMDhyilGlvO7D98ajx9vk3V1Ft9r9oL7Fk5qSYwtsi:KDlqDRsPt9r94Fk5qSCi
- TLSH T122C38C117D62E177C04AC6F00929D361EEBE6931667855C3F3890FB99EB12D06A3E34B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-24_9591d2dd1adcc15e47e6d6b51feea6cc_amadey_elex_redline-stealer_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-24_9591d2dd1adcc15e47e6d6b51feea6cc_amadey_elex_redline-stealer_smoke-loader_stealc_stop.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-24_9591d2dd1adcc15e47e6d6b51feea6cc_amadey_elex_redline-stealer_smoke-loader_stealc_stop
- Size 123KB
- SHA256 e6fea7870a9027ae9982e93fa0cb10fdbc7bb3bc3e783847fb8ffc5ed4ec4a62
- MD5 9591d2dd1adcc15e47e6d6b51feea6cc
- SHA1 0db99dba725c62bdd8dba6f1928aa5b9ebf0fb92
- SHA512 cb89fc3365926f1648c17918615ef53d869b983fcdd190e9640f36330b157935c4758d92a8430c4ff8aba303cf6f306b20e41a96e79231eb2cbc6e93c5345df1
- SSDEEP 1536:iqGFRfepwMDhyilGlvO7D98ajx9vk3V1Ft9r9oL7Fk5qSYwtsi:KDlqDRsPt9r94Fk5qSCi
- TLSH T122C38C117D62E177C04AC6F00929D361EEBE6931667855C3F3890FB99EB12D06A3E34B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.