General
- Target 2026-08-04_85f3530ca57ceb4d03ec876b65930e0a_amadey_elex_karagany_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 23.8MB
- Sample260804-2mqxcaaa23
- SHA256 a146a9a6233849ec75da76c42b1b7aa3cdf6172016c00a9bdc35260c9c5a2cc8
- MD5 85f3530ca57ceb4d03ec876b65930e0a
- SHA1 ec514f20d7accf27cc7eb45e83f5c516590fefed
- SHA512 66da85883c45c879aadd8e92c8f90ce8bd2b507af30c4133cc56bc50fdbeda1e945762a57be61f41b3100d8fb13bb8b1230bb37658bb0e393c97fb15bffe33b9
- SSDEEP 393216:NXT2wukNVNaJ0jwLkSE7m9W16xxN3caP3mU65gufjggMTt12JFBy6A+p9Sbv5NiS:NjokmLkSE7CxNPP3hu0gMTt12py6bSca
- TLSH T1CA47331BF2A7F1F1D09108B52438C7A24E296C7027E405EFFFDB6A998D216D19632787
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-04_85f3530ca57ceb4d03ec876b65930e0a_amadey_elex_karagany_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_85f3530ca57ceb4d03ec876b65930e0a_amadey_elex_karagany_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 23.8MB
- SHA256 a146a9a6233849ec75da76c42b1b7aa3cdf6172016c00a9bdc35260c9c5a2cc8
- MD5 85f3530ca57ceb4d03ec876b65930e0a
- SHA1 ec514f20d7accf27cc7eb45e83f5c516590fefed
- SHA512 66da85883c45c879aadd8e92c8f90ce8bd2b507af30c4133cc56bc50fdbeda1e945762a57be61f41b3100d8fb13bb8b1230bb37658bb0e393c97fb15bffe33b9
- SSDEEP 393216:NXT2wukNVNaJ0jwLkSE7m9W16xxN3caP3mU65gufjggMTt12JFBy6A+p9Sbv5NiS:NjokmLkSE7CxNPP3hu0gMTt12py6bSca
- TLSH T1CA47331BF2A7F1F1D09108B52438C7A24E296C7027E405EFFFDB6A998D216D19632787
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL