General
- Target 2026-07-29_58f5ec7856bd2c12c1895d1c6f1004d0_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop_swisyn
- Size 176KB
- Sample260729-wd6csayflg
- SHA256 8cb4fb3db67b5958154d48149caa5c66d78665571a4aabc48f41b32aef0d955c
- MD5 58f5ec7856bd2c12c1895d1c6f1004d0
- SHA1 5bb329a9d48f38845d6554d192fc82a360cff63f
- SHA512 b361e402d00cb508a0c8ec651948b4e550202422c3b43327af6fc14880ce2dd54a8c9c5e194db9c86b6440ea56bd8145105dea58aeee7ee7c56a9e45a20c97ae
- SSDEEP 3072:UVqoCl/YgjxEufVU0TbTyDDalRk0iuLXr8SRbsDz:UsLqdufVUNDag2LXrq
- TLSH T1340429236E60543FE421C9F12869EB5AB9652D360BE19C177267FB162B31643B2F130F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_58f5ec7856bd2c12c1895d1c6f1004d0_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop_swisyn.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_58f5ec7856bd2c12c1895d1c6f1004d0_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop_swisyn.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_58f5ec7856bd2c12c1895d1c6f1004d0_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop_swisyn
- Size 176KB
- SHA256 8cb4fb3db67b5958154d48149caa5c66d78665571a4aabc48f41b32aef0d955c
- MD5 58f5ec7856bd2c12c1895d1c6f1004d0
- SHA1 5bb329a9d48f38845d6554d192fc82a360cff63f
- SHA512 b361e402d00cb508a0c8ec651948b4e550202422c3b43327af6fc14880ce2dd54a8c9c5e194db9c86b6440ea56bd8145105dea58aeee7ee7c56a9e45a20c97ae
- SSDEEP 3072:UVqoCl/YgjxEufVU0TbTyDDalRk0iuLXr8SRbsDz:UsLqdufVUNDag2LXrq
- TLSH T1340429236E60543FE421C9F12869EB5AB9652D360BE19C177267FB162B31643B2F130F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory