General
- Target 2026-07-28_0a29e1e12af9be376ec5771898708561_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop_swisyn
- Size 339KB
- Sample260728-v8e9easygt
- SHA256 d0ed4ddf20785def7f0b8c2b09404255ef49304ebbb87328595ddff6aea03723
- MD5 0a29e1e12af9be376ec5771898708561
- SHA1 723180aa539d09df0cbef4d12aea2155372edb62
- SHA512 2ca443d4bf939a4289ec04093ccbf90272de7ec75e1ed5ecfe9d6cb91dfe7e3e2024143250bbe03c4a6426f9764daaf27aa1fd553233a68dbbbe2a688e5ff573
- SSDEEP 3072:UVqoCl/YgjxEufVU0TbTyDDalG/qkLnAdeRbvAZpoKIIn9xg//XHTfq2M0W30L/H:UsLqdufVUNDaMLAoYZCIn9SzsFwWw
- TLSH T1ED749D237F20983FD811CAF16CE5DA6AB6366D212BD06D473356BB112A3134375B522F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-28_0a29e1e12af9be376ec5771898708561_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop_swisyn.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_0a29e1e12af9be376ec5771898708561_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop_swisyn.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_0a29e1e12af9be376ec5771898708561_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop_swisyn
- Size 339KB
- SHA256 d0ed4ddf20785def7f0b8c2b09404255ef49304ebbb87328595ddff6aea03723
- MD5 0a29e1e12af9be376ec5771898708561
- SHA1 723180aa539d09df0cbef4d12aea2155372edb62
- SHA512 2ca443d4bf939a4289ec04093ccbf90272de7ec75e1ed5ecfe9d6cb91dfe7e3e2024143250bbe03c4a6426f9764daaf27aa1fd553233a68dbbbe2a688e5ff573
- SSDEEP 3072:UVqoCl/YgjxEufVU0TbTyDDalG/qkLnAdeRbvAZpoKIIn9xg//XHTfq2M0W30L/H:UsLqdufVUNDaMLAoYZCIn9SzsFwWw
- TLSH T1ED749D237F20983FD811CAF16CE5DA6AB6366D212BD06D473356BB112A3134375B522F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory