General
- Target 2026-08-03_242d75cfe5feac0e22daad6788905b70_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 72KB
- Sample260804-dqj17scb29
- SHA256 c9fb6910968ae601a8cfaf268521f3be38bafe357a6babe85b1911a4fc57278f
- MD5 242d75cfe5feac0e22daad6788905b70
- SHA1 fab2fd189c13e1f68af312ed9cd8d9d51010bb1c
- SHA512 9afc0f476fcb05dddb6fbb14fc1e9e1d73fb8ad0bf7ec1ff13d721965ef4e84f66f54ace5a34513a021884e52f92839f58223f39b96d174b0c97b53f2afe567f
- SSDEEP 768:+00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDw9T6cBJhFd/B5U:+00URPnKfZrT2DawRR8JfP3IZB355B/i
- TLSH T1C9738E467891C4B2D80054B41426C6929FBFAC1257A5D0CBFB993E7E9F313DB893938E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_242d75cfe5feac0e22daad6788905b70_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_242d75cfe5feac0e22daad6788905b70_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_242d75cfe5feac0e22daad6788905b70_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 72KB
- SHA256 c9fb6910968ae601a8cfaf268521f3be38bafe357a6babe85b1911a4fc57278f
- MD5 242d75cfe5feac0e22daad6788905b70
- SHA1 fab2fd189c13e1f68af312ed9cd8d9d51010bb1c
- SHA512 9afc0f476fcb05dddb6fbb14fc1e9e1d73fb8ad0bf7ec1ff13d721965ef4e84f66f54ace5a34513a021884e52f92839f58223f39b96d174b0c97b53f2afe567f
- SSDEEP 768:+00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDw9T6cBJhFd/B5U:+00URPnKfZrT2DawRR8JfP3IZB355B/i
- TLSH T1C9738E467891C4B2D80054B41426C6929FBFAC1257A5D0CBFB993E7E9F313DB893938E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory