General
- Target 2026-08-02_f32f64a92c66529ad63d224dd02258e8_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 65KB
- Sample260802-jk4rbafb92
- SHA256 006bf7a0ed8377d966f282e3be4e24deef4493be2e487484fffb61500887227b
- MD5 f32f64a92c66529ad63d224dd02258e8
- SHA1 0f2303ddec14e7e108a37530b8e7dd5ded3c77f1
- SHA512 49bd5b937332b947780113de4a3b707301c9dee39037cfad729d1814f44a91477eafe9ac534a5bb41b8cb775c64b5b5150ff0a810f712430dbeb6d80c1d16212
- SSDEEP 768:b00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDwkT6cBJhFd/B5C:b00URPnKfZrT2DawRR8JfP3BZB355B/E
- TLSH T195639E567890C4B2D80060B41826C6929F6FAD2147B5C0C7BB993E7E9F323DB993934E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_f32f64a92c66529ad63d224dd02258e8_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_f32f64a92c66529ad63d224dd02258e8_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_f32f64a92c66529ad63d224dd02258e8_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 65KB
- SHA256 006bf7a0ed8377d966f282e3be4e24deef4493be2e487484fffb61500887227b
- MD5 f32f64a92c66529ad63d224dd02258e8
- SHA1 0f2303ddec14e7e108a37530b8e7dd5ded3c77f1
- SHA512 49bd5b937332b947780113de4a3b707301c9dee39037cfad729d1814f44a91477eafe9ac534a5bb41b8cb775c64b5b5150ff0a810f712430dbeb6d80c1d16212
- SSDEEP 768:b00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDwkT6cBJhFd/B5C:b00URPnKfZrT2DawRR8JfP3BZB355B/E
- TLSH T195639E567890C4B2D80060B41826C6929F6FAD2147B5C0C7BB993E7E9F323DB993934E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory