General
- Target 2026-08-10_05f340d4fee2870a2aa70f87d594eb56_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 180KB
- Sample260810-m1h2bsssbw
- SHA256 110ef76f4d340aa4191e1c4bd2120a2d918ae3a772c3d712623cc0c253d19748
- MD5 05f340d4fee2870a2aa70f87d594eb56
- SHA1 fd3303bd1e961989a588732f455a91c963343c04
- SHA512 5579c7621a15dd6fcd37d7965a41318dd1d5ad39efb17cae6594dce597fc322b5e9bc3a207ec82d2d29135d4870ac13545f770c7f70f3f7e47cf2485e0c27819
- SSDEEP 3072:AS0R8Y6hD7EyQIrZhbSJKmFylNaAS876RtlpUKC/h6:AxR8Y6lgY5Zfv23Ufp6
- TLSH T10704D0537B42D431C4204971045AC3966B7DFD261AB9E99373923F7F2E323D1AB2A24B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_05f340d4fee2870a2aa70f87d594eb56_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_05f340d4fee2870a2aa70f87d594eb56_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win11ltsc2024-20260710-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_05f340d4fee2870a2aa70f87d594eb56_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 180KB
- SHA256 110ef76f4d340aa4191e1c4bd2120a2d918ae3a772c3d712623cc0c253d19748
- MD5 05f340d4fee2870a2aa70f87d594eb56
- SHA1 fd3303bd1e961989a588732f455a91c963343c04
- SHA512 5579c7621a15dd6fcd37d7965a41318dd1d5ad39efb17cae6594dce597fc322b5e9bc3a207ec82d2d29135d4870ac13545f770c7f70f3f7e47cf2485e0c27819
- SSDEEP 3072:AS0R8Y6hD7EyQIrZhbSJKmFylNaAS876RtlpUKC/h6:AxR8Y6lgY5Zfv23Ufp6
- TLSH T10704D0537B42D431C4204971045AC3966B7DFD261AB9E99373923F7F2E323D1AB2A24B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Modifies visibility of file extensions in Explorer
-
Modifies visibility of hidden/system files in Explorer
-
Drops file in Drivers directory
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
2Hidden Files and Directories
2Impair Defenses
1Disable or Modify System Firewall
1Modify Registry
3