General
- Target 2026-07-31_2b46b7f15cdcb7d701682b0cfe594e5a_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 72KB
- Sample260801-ad7d7attft
- SHA256 24c2110145763a38374b5da6dd339aef5259b0cc90f3a4a805f67181d629800e
- MD5 2b46b7f15cdcb7d701682b0cfe594e5a
- SHA1 24574c41bf11e0595f9c57cdee2dcd935f2be5bc
- SHA512 8a83c2b9c924a704b88fa142fd47c356f8232cd201d3856617279cd94a4341c326a424ac38b8fd403a1b08c0e1d82594ac8f21fd5d85f1794fca36298563e8dd
- SSDEEP 768:+00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDwiT6cBJhFd/B5Y:+00URPnKfZrT2DawRR8JfP3bZB355B/
- TLSH T162738E467881C4B2D80054B41426C6929FBFAD1257A5D0CBFB993E7E9F313DB893938D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_2b46b7f15cdcb7d701682b0cfe594e5a_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_2b46b7f15cdcb7d701682b0cfe594e5a_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_2b46b7f15cdcb7d701682b0cfe594e5a_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 72KB
- SHA256 24c2110145763a38374b5da6dd339aef5259b0cc90f3a4a805f67181d629800e
- MD5 2b46b7f15cdcb7d701682b0cfe594e5a
- SHA1 24574c41bf11e0595f9c57cdee2dcd935f2be5bc
- SHA512 8a83c2b9c924a704b88fa142fd47c356f8232cd201d3856617279cd94a4341c326a424ac38b8fd403a1b08c0e1d82594ac8f21fd5d85f1794fca36298563e8dd
- SSDEEP 768:+00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDwiT6cBJhFd/B5Y:+00URPnKfZrT2DawRR8JfP3bZB355B/
- TLSH T162738E467881C4B2D80054B41426C6929FBFAD1257A5D0CBFB993E7E9F313DB893938D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory