General
- Target 2026-08-17_9994c085757971354695381a0a646464_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 72KB
- Sample260817-d2sgqasemh
- SHA256 547242c265dd94e433a8cf9a3e205f8d0ff1c2f312d50c50df01076feee7c215
- MD5 9994c085757971354695381a0a646464
- SHA1 d5138f3fd452d4a2e6955101415a17023caad825
- SHA512 3fac2a8ea508bb26ae98f21cc6913d840c7645fc5ac98f6a6be3a66ae0f56b88c438dc110a0ac35abca80e44fed035d36bae5f94d90a15eead3e0632731dca13
- SSDEEP 768:+00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDw6T6cBJhFd/B5x:+00URPnKfZrT2DawRR8JfP3TZB355B/L
- TLSH T11E738E467881C4B2D80054B41426C6929FBFAD1257A5D0CBFB993E7E9F313DB893938D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-17_9994c085757971354695381a0a646464_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_9994c085757971354695381a0a646464_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_9994c085757971354695381a0a646464_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 72KB
- SHA256 547242c265dd94e433a8cf9a3e205f8d0ff1c2f312d50c50df01076feee7c215
- MD5 9994c085757971354695381a0a646464
- SHA1 d5138f3fd452d4a2e6955101415a17023caad825
- SHA512 3fac2a8ea508bb26ae98f21cc6913d840c7645fc5ac98f6a6be3a66ae0f56b88c438dc110a0ac35abca80e44fed035d36bae5f94d90a15eead3e0632731dca13
- SSDEEP 768:+00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDw6T6cBJhFd/B5x:+00URPnKfZrT2DawRR8JfP3TZB355B/L
- TLSH T11E738E467881C4B2D80054B41426C6929FBFAD1257A5D0CBFB993E7E9F313DB893938D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory