General
- Target 2026-08-04_a2c979c249d62219ff6c6f287305ac21_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 72KB
- Sample260804-r2y66azvez
- SHA256 c51edea071db5c820eb062058a41754d50f8fc934647d8c3a7802590f2a329b3
- MD5 a2c979c249d62219ff6c6f287305ac21
- SHA1 c4a0292be23976c82ebffb23df78167e7fc19948
- SHA512 51d2fd64723ce359cb631382e2b0f659bd98613f8fac6c7053db8354427cfda5148bbf2f032141242e44aa594f0398c8b5a2bf613e688a09f7b81c008f372143
- SSDEEP 768:+00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDwaT6cBJhFd/B5Y:+00URPnKfZrT2DawRR8JfP3jZB355B/
- TLSH T14A738E467881C4B2D80054B41426C6929FBFAD1257A5D0CBFB993E7E9F313DB893938D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_a2c979c249d62219ff6c6f287305ac21_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_a2c979c249d62219ff6c6f287305ac21_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_a2c979c249d62219ff6c6f287305ac21_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 72KB
- SHA256 c51edea071db5c820eb062058a41754d50f8fc934647d8c3a7802590f2a329b3
- MD5 a2c979c249d62219ff6c6f287305ac21
- SHA1 c4a0292be23976c82ebffb23df78167e7fc19948
- SHA512 51d2fd64723ce359cb631382e2b0f659bd98613f8fac6c7053db8354427cfda5148bbf2f032141242e44aa594f0398c8b5a2bf613e688a09f7b81c008f372143
- SSDEEP 768:+00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDwaT6cBJhFd/B5Y:+00URPnKfZrT2DawRR8JfP3jZB355B/
- TLSH T14A738E467881C4B2D80054B41426C6929FBFAD1257A5D0CBFB993E7E9F313DB893938D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory