General
- Target 2026-08-12_1df75b406a3eba4b22468472c3fd1209_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 72KB
- Sample260812-l4pgvaem3z
- SHA256 cb77829b1300986a33f1b5b991b71cf903d3be523ebb6f5760daaf0c8350352f
- MD5 1df75b406a3eba4b22468472c3fd1209
- SHA1 3fb8aac370a21426e82fb3e13d4b5d2eae53cceb
- SHA512 b5d505b60b8237d9feaa15469e1534578b94a92ddec983decc70aa3a8f9b2a59024bf05e62bde1af4ea8f883f1e7eaebb4d7fcf8d165a71e79b0fb7e40f3b132
- SSDEEP 768:+00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDw0T6cBJhFd/B5U:+00URPnKfZrT2DawRR8JfP3lZB355B/i
- TLSH T1F5738E467881C4B2D80054B41426C6929FBFAD1257A5D0CBFB993E7E9F313DB893938E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_1df75b406a3eba4b22468472c3fd1209_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_1df75b406a3eba4b22468472c3fd1209_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_1df75b406a3eba4b22468472c3fd1209_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 72KB
- SHA256 cb77829b1300986a33f1b5b991b71cf903d3be523ebb6f5760daaf0c8350352f
- MD5 1df75b406a3eba4b22468472c3fd1209
- SHA1 3fb8aac370a21426e82fb3e13d4b5d2eae53cceb
- SHA512 b5d505b60b8237d9feaa15469e1534578b94a92ddec983decc70aa3a8f9b2a59024bf05e62bde1af4ea8f883f1e7eaebb4d7fcf8d165a71e79b0fb7e40f3b132
- SSDEEP 768:+00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDw0T6cBJhFd/B5U:+00URPnKfZrT2DawRR8JfP3lZB355B/i
- TLSH T1F5738E467881C4B2D80054B41426C6929FBFAD1257A5D0CBFB993E7E9F313DB893938E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory