General
- Target 2026-07-28_6be6309728ef89d77b4df4ec59f8e498_amadey_elex_karagany_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 4.2MB
- Sample260729-bdl9pasyfx
- SHA256 4ec0c922497d3d2868330936e26c24b75e24da940a1e4fd6862a3bb47650cd63
- MD5 6be6309728ef89d77b4df4ec59f8e498
- SHA1 59efd5a832c219072a27b968f34f4261f773ea2f
- SHA512 03f12c00439da843b6edaf2e82f25a0547d03ec317cb73a5b88bbf759f48c60ccb7e7c7506f0c5315e225497ebe0aed923ef4d13c4af169889bc38c2032f2dd0
- SSDEEP 98304:Y8l9QzPbw2PaXqSAsd6uxceJSEkg17HRxiy+cw9fSVYRWxtuG:Y8l9+P1yXqSd6uGeMxg7xAZHMaG
- TLSH T196162302F682C072C065107505B6EA718E3A7C31D7ADC9E7AFD07A4E9D3A3D1AE76247
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-28_6be6309728ef89d77b4df4ec59f8e498_amadey_elex_karagany_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_6be6309728ef89d77b4df4ec59f8e498_amadey_elex_karagany_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 4.2MB
- SHA256 4ec0c922497d3d2868330936e26c24b75e24da940a1e4fd6862a3bb47650cd63
- MD5 6be6309728ef89d77b4df4ec59f8e498
- SHA1 59efd5a832c219072a27b968f34f4261f773ea2f
- SHA512 03f12c00439da843b6edaf2e82f25a0547d03ec317cb73a5b88bbf759f48c60ccb7e7c7506f0c5315e225497ebe0aed923ef4d13c4af169889bc38c2032f2dd0
- SSDEEP 98304:Y8l9QzPbw2PaXqSAsd6uxceJSEkg17HRxiy+cw9fSVYRWxtuG:Y8l9+P1yXqSd6uGeMxg7xAZHMaG
- TLSH T196162302F682C072C065107505B6EA718E3A7C31D7ADC9E7AFD07A4E9D3A3D1AE76247
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL