General
- Target 2026-08-07_f45737257f8825af932db63fd87cf6dd_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 72KB
- Sample260807-csf7nawcjc
- SHA256 26708ad730ca3227ccca069141010a2b376f3dcf8aa8bbc30388933dc0b5e7d0
- MD5 f45737257f8825af932db63fd87cf6dd
- SHA1 0bf9767580ec4c51e657aaa370ed8d278b6f2e04
- SHA512 e9f44022be6a53f9b32bca24e605c66b9cbb8b998150ffbb02140df448ed3b6f8ba64e46a08a2ffac121c85b557e4a43ec1c699661c21c46d803e7b1be663ee3
- SSDEEP 768:+00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDw5T6cBJhFd/B5Y:+00URPnKfZrT2DawRR8JfP3QZB355B/
- TLSH T137738E467881C4B2D80054B41826C6929FBFAD1257A5D0CBFB993E7E9F313DB893938D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_f45737257f8825af932db63fd87cf6dd_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_f45737257f8825af932db63fd87cf6dd_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_f45737257f8825af932db63fd87cf6dd_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 72KB
- SHA256 26708ad730ca3227ccca069141010a2b376f3dcf8aa8bbc30388933dc0b5e7d0
- MD5 f45737257f8825af932db63fd87cf6dd
- SHA1 0bf9767580ec4c51e657aaa370ed8d278b6f2e04
- SHA512 e9f44022be6a53f9b32bca24e605c66b9cbb8b998150ffbb02140df448ed3b6f8ba64e46a08a2ffac121c85b557e4a43ec1c699661c21c46d803e7b1be663ee3
- SSDEEP 768:+00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDw5T6cBJhFd/B5Y:+00URPnKfZrT2DawRR8JfP3QZB355B/
- TLSH T137738E467881C4B2D80054B41826C6929FBFAD1257A5D0CBFB993E7E9F313DB893938D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory