General
- Target 2026-07-27_e0ce9a008fcdd13a2444f1f280086fcf_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 72KB
- Sample260727-2mqatadf54
- SHA256 6ba9dee0e255289591b61bf187d7f65ba129aad262ab628642ece213c3a0c670
- MD5 e0ce9a008fcdd13a2444f1f280086fcf
- SHA1 3c8a631968dd50b6fd7bccaadf347a9b1209a42f
- SHA512 6c48cdcafdab206512dcd2d426db0b059d7d9f00fd9a48f429d986dc62db79a8b794c9c9e6d44491cbacca6bb3e780a4323aeefb0ab4ece9f509fbe112093d5b
- SSDEEP 768:+00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDwZT6cBJhFd/B5x:+00URPnKfZrT2DawRR8JfP3kZB355B/L
- TLSH T13D738E467881C4B2D80054B41426C6929F7FAD1257A5D0CBFB993E7E9F313DB893938D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-27_e0ce9a008fcdd13a2444f1f280086fcf_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_e0ce9a008fcdd13a2444f1f280086fcf_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_e0ce9a008fcdd13a2444f1f280086fcf_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 72KB
- SHA256 6ba9dee0e255289591b61bf187d7f65ba129aad262ab628642ece213c3a0c670
- MD5 e0ce9a008fcdd13a2444f1f280086fcf
- SHA1 3c8a631968dd50b6fd7bccaadf347a9b1209a42f
- SHA512 6c48cdcafdab206512dcd2d426db0b059d7d9f00fd9a48f429d986dc62db79a8b794c9c9e6d44491cbacca6bb3e780a4323aeefb0ab4ece9f509fbe112093d5b
- SSDEEP 768:+00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDwZT6cBJhFd/B5x:+00URPnKfZrT2DawRR8JfP3kZB355B/L
- TLSH T13D738E467881C4B2D80054B41426C6929F7FAD1257A5D0CBFB993E7E9F313DB893938D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory