Analysis
- max time kernel
0s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
07/08/2026, 04:22
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_30ad98d7806f1075f5fec34844d1b1c0_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_30ad98d7806f1075f5fec34844d1b1c0_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2026-08-07_30ad98d7806f1075f5fec34844d1b1c0_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-08-07_30ad98d7806f1075f5fec34844d1b1c0_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: The application has failed to start because its side-by-side configuration is incorrect. Please see the application event log or use the command-line sxstrace.exe tool for more detail.
General
- Target 2026-08-07_30ad98d7806f1075f5fec34844d1b1c0_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
- Size 98KB
- Sample260807-ezenhsxdld
- SHA256 21b152449cb705c819f15e304d4dfff696b872d86b53f87ddbb7253fba6320b6
- MD5 30ad98d7806f1075f5fec34844d1b1c0
- SHA1 200e0d6d25e03e428694dd43ce43f8d31562f63c
- SHA512 cfda3a0dd8077282c54b4406e76e4a51bd621c9669a7b502e051b864ac316f97dc7a191175712fc79489afa3969d02f825b1143a9bf0eb55394a8e28d803171d
- SSDEEP 768:YrEaMSC5WgRfieUE6846M+/RLUzqqUN5J74cU6TNI3PLXJBnb+/q65crYq+QIrr:YrER9ieUOc+/RAhDcaPLXbbsAyQIrr
- TLSH T16DA35E12B673D337CAA354B23429DAA3C915F22151182E1BF356273E9632BF067D970B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-07_30ad98d7806f1075f5fec34844d1b1c0_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-07_30ad98d7806f1075f5fec34844d1b1c0_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe"1⤵PID:4776