General
- Target 2026-07-27_94757173e2686cc5cb29cc5e33c02903_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 72KB
- Sample260727-2rnb1stvd1
- SHA256 68be2a393a0aeb30a5994f83466e0437af8fff7dcc6abfdd821b1d284c8d510c
- MD5 94757173e2686cc5cb29cc5e33c02903
- SHA1 c9be04484555d456e430a8e649bf7606091c2dc7
- SHA512 321702a97242b2b15921ef5f4465b4f8ec122eb45e3ae19314ad33c835763679b01f65f97c5a958a8595cc515030172eca1bfe7c2a9be0d0d9807b26a8979682
- SSDEEP 768:+00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDwpT6cBJhFd/B5x:+00URPnKfZrT2DawRR8JfP3IZB355B/L
- TLSH T125738D467881C4B2D80054B41426C6929FBFAD1257A5D0CBFB993E7E9F313DB893938E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-27_94757173e2686cc5cb29cc5e33c02903_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_94757173e2686cc5cb29cc5e33c02903_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_94757173e2686cc5cb29cc5e33c02903_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 72KB
- SHA256 68be2a393a0aeb30a5994f83466e0437af8fff7dcc6abfdd821b1d284c8d510c
- MD5 94757173e2686cc5cb29cc5e33c02903
- SHA1 c9be04484555d456e430a8e649bf7606091c2dc7
- SHA512 321702a97242b2b15921ef5f4465b4f8ec122eb45e3ae19314ad33c835763679b01f65f97c5a958a8595cc515030172eca1bfe7c2a9be0d0d9807b26a8979682
- SSDEEP 768:+00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDwpT6cBJhFd/B5x:+00URPnKfZrT2DawRR8JfP3IZB355B/L
- TLSH T125738D467881C4B2D80054B41426C6929FBFAD1257A5D0CBFB993E7E9F313DB893938E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory