General
- Target 2026-08-02_e309b42cb019e014f4624d05a3e19606_amadey_elex_redline-stealer_smoke-loader_stealc_stop
- Size 123KB
- Sample260802-cyabasbq5w
- SHA256 bed38d640432c75bd1847afdfd4e93bc6ab7cde3d3a3a013903d3ed3503aaf4d
- MD5 e309b42cb019e014f4624d05a3e19606
- SHA1 fe56d43de755a71733577139dbcdcde921e8a182
- SHA512 dcd8e7769ce3bbcce23c03e71eb12e9e6022585e1b2de28022be2e19a284a655b7887bd5b38317b09ef599acadff919efcc672b1eb131a61df0be53407037b15
- SSDEEP 1536:82Fb4bdd6M1I23CsoX/DHZclZ4gQhuArbnSOkLxnVDtFn/wo6k5UpwtsA:Hh4HZ1r3QvmlVQ1SX5tFn/B6k5UhA
- TLSH T17EC38D217881C0B7C04AD5B00919D361EA7F7E3296B85583F7990BBA9FB13D0763D26B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_e309b42cb019e014f4624d05a3e19606_amadey_elex_redline-stealer_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_e309b42cb019e014f4624d05a3e19606_amadey_elex_redline-stealer_smoke-loader_stealc_stop.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_e309b42cb019e014f4624d05a3e19606_amadey_elex_redline-stealer_smoke-loader_stealc_stop
- Size 123KB
- SHA256 bed38d640432c75bd1847afdfd4e93bc6ab7cde3d3a3a013903d3ed3503aaf4d
- MD5 e309b42cb019e014f4624d05a3e19606
- SHA1 fe56d43de755a71733577139dbcdcde921e8a182
- SHA512 dcd8e7769ce3bbcce23c03e71eb12e9e6022585e1b2de28022be2e19a284a655b7887bd5b38317b09ef599acadff919efcc672b1eb131a61df0be53407037b15
- SSDEEP 1536:82Fb4bdd6M1I23CsoX/DHZclZ4gQhuArbnSOkLxnVDtFn/wo6k5UpwtsA:Hh4HZ1r3QvmlVQ1SX5tFn/B6k5UhA
- TLSH T17EC38D217881C0B7C04AD5B00919D361EA7F7E3296B85583F7990BBA9FB13D0763D26B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.