General
- Target 2026-08-10_2210d9cc2fa10bcda90c49f2a38eaa7f_amadey_elex_redline-stealer_smoke-loader_stealc_stop
- Size 136KB
- Sample260810-2s34vsbl2x
- SHA256 d5a4851a63b6bb6f6eaa76f7ca6f5a011b44b76fd88486e70192afc8528fbad0
- MD5 2210d9cc2fa10bcda90c49f2a38eaa7f
- SHA1 c6a3d6668fac1b081777980cba3f77dad20f19ff
- SHA512 a7a1bd5cf4de205bd7f8c700f78491cedb34acafb4088d4a2b1cc38445d0d0299ed4a6e2e245f567b123a0565638d4e8f476af8d96b7562f108f1c91dd22e39d
- SSDEEP 1536:46BCqjmug1b465/qUlkF3rHlTa2BEQqFkxDipTn5SA4TrRqwtsUUxtf9rtXu:n6dlQ3fEoyTn5SZTrRYzXu
- TLSH T147D39D107881C533C44ACA341419DB669E3E7A3126B89583F3991FFA5FB13E96A3D34B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_2210d9cc2fa10bcda90c49f2a38eaa7f_amadey_elex_redline-stealer_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_2210d9cc2fa10bcda90c49f2a38eaa7f_amadey_elex_redline-stealer_smoke-loader_stealc_stop.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_2210d9cc2fa10bcda90c49f2a38eaa7f_amadey_elex_redline-stealer_smoke-loader_stealc_stop
- Size 136KB
- SHA256 d5a4851a63b6bb6f6eaa76f7ca6f5a011b44b76fd88486e70192afc8528fbad0
- MD5 2210d9cc2fa10bcda90c49f2a38eaa7f
- SHA1 c6a3d6668fac1b081777980cba3f77dad20f19ff
- SHA512 a7a1bd5cf4de205bd7f8c700f78491cedb34acafb4088d4a2b1cc38445d0d0299ed4a6e2e245f567b123a0565638d4e8f476af8d96b7562f108f1c91dd22e39d
- SSDEEP 1536:46BCqjmug1b465/qUlkF3rHlTa2BEQqFkxDipTn5SA4TrRqwtsUUxtf9rtXu:n6dlQ3fEoyTn5SZTrRYzXu
- TLSH T147D39D107881C533C44ACA341419DB669E3E7A3126B89583F3991FFA5FB13E96A3D34B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.