Analysis
- max time kernel
0s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
05/08/2026, 02:57
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_8be72eba0fa170391984dc6994dcf97e_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_8be72eba0fa170391984dc6994dcf97e_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2026-08-05_8be72eba0fa170391984dc6994dcf97e_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-08-05_8be72eba0fa170391984dc6994dcf97e_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: The application has failed to start because its side-by-side configuration is incorrect. Please see the application event log or use the command-line sxstrace.exe tool for more detail.
General
- Target 2026-08-05_8be72eba0fa170391984dc6994dcf97e_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
- Size 98KB
- Sample260805-dfyrlswhnf
- SHA256 e8890cad3187093f12a99251a25d3de0e567c5f490f0cce8d2bf7d247cf6b681
- MD5 8be72eba0fa170391984dc6994dcf97e
- SHA1 6c5bb3e025598af58802a05465954aad0a6a8fc5
- SHA512 52a0442c7c7d25ad077a6b082db67e2138787138a075dce864477938e9e0bf4c0baf466000cbccf92c228e80169153027b9be7d526e104b11697e520b3bc3098
- SSDEEP 768:YrEaMSC5WgRfieUE6846M+/RLUzqqUN5J74cU6TNI3PLXJBnb+/q65srYq+QIr:YrER9ieUOc+/RAhDcaPLXbbswyQIr
- TLSH T12EA39E22BA91C032C4115472046AC792AA7EF43513B9CDD3BB871F6E5F313E1E63A74A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-05_8be72eba0fa170391984dc6994dcf97e_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-05_8be72eba0fa170391984dc6994dcf97e_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe"1⤵PID:4396