General
- Target 2026-08-10_89308d9605b8e1a3c5b8625b75ea0642_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 696KB
- Sample260810-e4lydsvzbt
- SHA256 31c2b9542cfa4cbeef63ad824e5a73d01af9f863a8df56a0687c79c3032862ba
- MD5 89308d9605b8e1a3c5b8625b75ea0642
- SHA1 1d054ca7f5515a1a8dac82d1df40177390e99564
- SHA512 f9c0b029c08a1a3acd728e70566f38842677f2c9322b7561909cac2eb3e55312c6d5773919be61d35952aca865745cbbea9968178afb6b47bd598f1644e753d2
- SSDEEP 12288:uw532+RWPzrvZc0IursYCYQeSnyZJiqlEbXSb9NtCGOF2O27MVz8:XRazrfMYenGJiKEbXWtfOkU8
- TLSH T14BE4AF3266949037D5B214B3E569C6307F3DA1181F2448EB53949F2E3A685C2BBFB387
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_89308d9605b8e1a3c5b8625b75ea0642_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_89308d9605b8e1a3c5b8625b75ea0642_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win11ltsc2024-20260709-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_89308d9605b8e1a3c5b8625b75ea0642_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 696KB
- SHA256 31c2b9542cfa4cbeef63ad824e5a73d01af9f863a8df56a0687c79c3032862ba
- MD5 89308d9605b8e1a3c5b8625b75ea0642
- SHA1 1d054ca7f5515a1a8dac82d1df40177390e99564
- SHA512 f9c0b029c08a1a3acd728e70566f38842677f2c9322b7561909cac2eb3e55312c6d5773919be61d35952aca865745cbbea9968178afb6b47bd598f1644e753d2
- SSDEEP 12288:uw532+RWPzrvZc0IursYCYQeSnyZJiqlEbXSb9NtCGOF2O27MVz8:XRazrfMYenGJiKEbXWtfOkU8
- TLSH T14BE4AF3266949037D5B214B3E569C6307F3DA1181F2448EB53949F2E3A685C2BBFB387
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory