General
- Target 2026-08-04_a0f3c759aa0348ee68ce1500b0984126_amadey_elex_redline-stealer_smoke-loader_stealc_stop
- Size 136KB
- Sample260805-av2j9sgn61
- SHA256 5b733403b7ba067d45cbb5714b9d0ab289a08f2fffd5b86232d5564657cad800
- MD5 a0f3c759aa0348ee68ce1500b0984126
- SHA1 2ee6066e92a024e8ce5f23831096c72c2994f35f
- SHA512 a34d086b79eec9b643cc4e1b0748cdcc8b080c28953ba37cb0f3277c209d0adf7919eb8c4938f14e81566bc2605af17c0e7f6626fef1feeed899e6e22651a5ad
- SSDEEP 1536:46BCqjmug1b465/qUlkF3rHlTa2BEQqFkxDipTn5SA4TrRqwtsUUxtf9rtX0:n6dlQ3fEoyTn5SZTrRYzX0
- TLSH T1C3D39D107881C533C44ACA341419DB669E3E7A3126B89583F3991FFA5FB13E96A3D34B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_a0f3c759aa0348ee68ce1500b0984126_amadey_elex_redline-stealer_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_a0f3c759aa0348ee68ce1500b0984126_amadey_elex_redline-stealer_smoke-loader_stealc_stop.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_a0f3c759aa0348ee68ce1500b0984126_amadey_elex_redline-stealer_smoke-loader_stealc_stop
- Size 136KB
- SHA256 5b733403b7ba067d45cbb5714b9d0ab289a08f2fffd5b86232d5564657cad800
- MD5 a0f3c759aa0348ee68ce1500b0984126
- SHA1 2ee6066e92a024e8ce5f23831096c72c2994f35f
- SHA512 a34d086b79eec9b643cc4e1b0748cdcc8b080c28953ba37cb0f3277c209d0adf7919eb8c4938f14e81566bc2605af17c0e7f6626fef1feeed899e6e22651a5ad
- SSDEEP 1536:46BCqjmug1b465/qUlkF3rHlTa2BEQqFkxDipTn5SA4TrRqwtsUUxtf9rtX0:n6dlQ3fEoyTn5SZTrRYzX0
- TLSH T1C3D39D107881C533C44ACA341419DB669E3E7A3126B89583F3991FFA5FB13E96A3D34B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.