General
- Target 2026-08-09_9ff6683e389e1d0c89def2f72b2a829d_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 72KB
- Sample260809-3t7n4s1vas
- SHA256 b9402eaa3f743456fce101d494ee872ec2e269fa6f0a34510f3b8d65a1ac08f1
- MD5 9ff6683e389e1d0c89def2f72b2a829d
- SHA1 568e4593b71ebdb7188587e8befcc35cf91629b4
- SHA512 17529f46daa8690dc9bf868f8ea0ac84de44b88571e41b36e77314338ec1be26cf29805cd6889ad50f57d56ceb94a9dce0c4f5d20a230ce5ef82c3890dda9670
- SSDEEP 768:+00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDwkT6cBJhFd/B5U:+00URPnKfZrT2DawRR8JfP3NZB355B/i
- TLSH T16C738E467881C4B2D80054B41426C6929F7FAC2257A5C0CBFB993E7E9F313DB893938D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_9ff6683e389e1d0c89def2f72b2a829d_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_9ff6683e389e1d0c89def2f72b2a829d_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_9ff6683e389e1d0c89def2f72b2a829d_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 72KB
- SHA256 b9402eaa3f743456fce101d494ee872ec2e269fa6f0a34510f3b8d65a1ac08f1
- MD5 9ff6683e389e1d0c89def2f72b2a829d
- SHA1 568e4593b71ebdb7188587e8befcc35cf91629b4
- SHA512 17529f46daa8690dc9bf868f8ea0ac84de44b88571e41b36e77314338ec1be26cf29805cd6889ad50f57d56ceb94a9dce0c4f5d20a230ce5ef82c3890dda9670
- SSDEEP 768:+00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDwkT6cBJhFd/B5U:+00URPnKfZrT2DawRR8JfP3NZB355B/i
- TLSH T16C738E467881C4B2D80054B41426C6929F7FAC2257A5C0CBFB993E7E9F313DB893938D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory