General
- Target 2026-07-31_261adaf679cb27c9966c01b151543caa_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 72KB
- Sample260731-glnelsbk8t
- SHA256 d558392757d0c9f1d4629299eeab2aa5df4773122f821cfe7707b55ecf5edd36
- MD5 261adaf679cb27c9966c01b151543caa
- SHA1 51fff48710f76f83bb95acf0edc10a175ce62776
- SHA512 51636b8373a904ca55aed86a27a3b065b862fc2b912835c5c49be69ef78d7b75cb687ffaebac760622eba8da0c5603ad03b1141278a13af5aacdf71a0399bcd3
- SSDEEP 768:+00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDwpT6cBJhFd/B5U:+00URPnKfZrT2DawRR8JfP3wZB355B/i
- TLSH T115738E467881C4B2D80054B41426C6929FBFAD1257A5D0CBFB993E7E9F313DB893938D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_261adaf679cb27c9966c01b151543caa_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_261adaf679cb27c9966c01b151543caa_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260710-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_261adaf679cb27c9966c01b151543caa_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 72KB
- SHA256 d558392757d0c9f1d4629299eeab2aa5df4773122f821cfe7707b55ecf5edd36
- MD5 261adaf679cb27c9966c01b151543caa
- SHA1 51fff48710f76f83bb95acf0edc10a175ce62776
- SHA512 51636b8373a904ca55aed86a27a3b065b862fc2b912835c5c49be69ef78d7b75cb687ffaebac760622eba8da0c5603ad03b1141278a13af5aacdf71a0399bcd3
- SSDEEP 768:+00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDwpT6cBJhFd/B5U:+00URPnKfZrT2DawRR8JfP3wZB355B/i
- TLSH T115738E467881C4B2D80054B41426C6929FBFAD1257A5D0CBFB993E7E9F313DB893938D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory