General
- Target 2026-08-06_22cbe0f24557866564bdfffd0fe81561_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop_swisyn
- Size 212KB
- Sample260806-q31wpscq3s
- SHA256 b44e8710b97d3e6581ca6dd63b63bf7eee6fe77b2572db53f453ba23fd248890
- MD5 22cbe0f24557866564bdfffd0fe81561
- SHA1 f8b396532719c2e24652ad739793d61156a5c053
- SHA512 9c5d3f12467b6188f4c6a42b8c2368ff7b3eb3512a23231e30b6f6a43682a322c6aeec3160d9bbe11be39ddb9ade6e20ee72b5aeb20bd4a58ed7e7964a279f39
- SSDEEP 3072:UVqoCl/YgjxEufVU0TbTyDDalCoL0Dxm82LM0vr/3TByr5NOaq:UsLqdufVUNDaADxmhLM0vrb+Pq
- TLSH T1F4245C237E50847BD852C9F058B9C66AB9366E361BE0AD077356AB601A70393F5F130F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-06_22cbe0f24557866564bdfffd0fe81561_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop_swisyn.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_22cbe0f24557866564bdfffd0fe81561_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop_swisyn.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_22cbe0f24557866564bdfffd0fe81561_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop_swisyn
- Size 212KB
- SHA256 b44e8710b97d3e6581ca6dd63b63bf7eee6fe77b2572db53f453ba23fd248890
- MD5 22cbe0f24557866564bdfffd0fe81561
- SHA1 f8b396532719c2e24652ad739793d61156a5c053
- SHA512 9c5d3f12467b6188f4c6a42b8c2368ff7b3eb3512a23231e30b6f6a43682a322c6aeec3160d9bbe11be39ddb9ade6e20ee72b5aeb20bd4a58ed7e7964a279f39
- SSDEEP 3072:UVqoCl/YgjxEufVU0TbTyDDalCoL0Dxm82LM0vr/3TByr5NOaq:UsLqdufVUNDaADxmhLM0vrb+Pq
- TLSH T1F4245C237E50847BD852C9F058B9C66AB9366E361BE0AD077356AB601A70393F5F130F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory