General
- Target 2026-08-15_1372e1d1cc56c43a015c5862fabf5eb5_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 72KB
- Sample260815-caqndadk7v
- SHA256 e1c500be9003a83404717c3a57c92ab7a463a8733156a47ac5786892fb109945
- MD5 1372e1d1cc56c43a015c5862fabf5eb5
- SHA1 829ca7c542251e33367c26b5478a405890f5d15c
- SHA512 940abb457838383b29bdbbbc055f2839ba0b4c79edd10727074569c344e18efc924b6bbc065e1fa9babae490513e59c082e93ec9101ce0830758b02bf33871e2
- SSDEEP 768:+00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDwdT6cBJhFd/B5Y:+00URPnKfZrT2DawRR8JfP3gZB355B/
- TLSH T1BA738E467881C4B2D80054B41826C6929FBFAD1257A5D0CBFB993E7E9F313DB893938D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_1372e1d1cc56c43a015c5862fabf5eb5_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_1372e1d1cc56c43a015c5862fabf5eb5_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260710-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_1372e1d1cc56c43a015c5862fabf5eb5_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 72KB
- SHA256 e1c500be9003a83404717c3a57c92ab7a463a8733156a47ac5786892fb109945
- MD5 1372e1d1cc56c43a015c5862fabf5eb5
- SHA1 829ca7c542251e33367c26b5478a405890f5d15c
- SHA512 940abb457838383b29bdbbbc055f2839ba0b4c79edd10727074569c344e18efc924b6bbc065e1fa9babae490513e59c082e93ec9101ce0830758b02bf33871e2
- SSDEEP 768:+00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDwdT6cBJhFd/B5Y:+00URPnKfZrT2DawRR8JfP3gZB355B/
- TLSH T1BA738E467881C4B2D80054B41826C6929FBFAD1257A5D0CBFB993E7E9F313DB893938D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory