General
- Target 2026-08-16_9aa6e6c2d860a38b5719679c477ddb41_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 72KB
- Sample260816-zfp1csfg83
- SHA256 7a4f44f27c397eea862779a57ef7609a3d885c419f6dac3de2aee6a2864a62b8
- MD5 9aa6e6c2d860a38b5719679c477ddb41
- SHA1 437bc2909b70a15ceccce3dcfceab140b92c6be8
- SHA512 96ebc6d070c642bd5bc021a786d70b3d818c048f8dc59d1d6c2dc86da45ca65e863b81ca70aee5b6c0163149a686f5cdb2d481fd01496f14c03e54cacf883ba8
- SSDEEP 768:+00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDwrT6cBJhFd/B5x:+00URPnKfZrT2DawRR8JfP3+ZB355B/L
- TLSH T1FA738D467881C4B2D80054B41426C6929FBFAD1257A5D0CBFB993E7E9F313DB893938E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_9aa6e6c2d860a38b5719679c477ddb41_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_9aa6e6c2d860a38b5719679c477ddb41_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_9aa6e6c2d860a38b5719679c477ddb41_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 72KB
- SHA256 7a4f44f27c397eea862779a57ef7609a3d885c419f6dac3de2aee6a2864a62b8
- MD5 9aa6e6c2d860a38b5719679c477ddb41
- SHA1 437bc2909b70a15ceccce3dcfceab140b92c6be8
- SHA512 96ebc6d070c642bd5bc021a786d70b3d818c048f8dc59d1d6c2dc86da45ca65e863b81ca70aee5b6c0163149a686f5cdb2d481fd01496f14c03e54cacf883ba8
- SSDEEP 768:+00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDwrT6cBJhFd/B5x:+00URPnKfZrT2DawRR8JfP3+ZB355B/L
- TLSH T1FA738D467881C4B2D80054B41426C6929FBFAD1257A5D0CBFB993E7E9F313DB893938E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory