General
- Target 2026-08-17_83f5d4ca2a2ef88566bdf489e1723d23_amadey_elex_redline-stealer_smoke-loader_stealc_stop
- Size 123KB
- Sample260817-gzttjsfk2w
- SHA256 fc1d79676ddd708c113beef8af1bc1036ffbe30ce040122a708f0edbbd1d8378
- MD5 83f5d4ca2a2ef88566bdf489e1723d23
- SHA1 10f898a3c5e9b9c8daffa7cc6b0f85c9e5e1eb9a
- SHA512 18f2d8b272ae98fa9e766ff0e262c612360e4bbe0a6a229d7f3faf92c76083358fc8e452a912a3e55336caec04172f1661bfc8aab9341cb7c5f9fcd25976620b
- SSDEEP 1536:eiAdI+hL+dbM4J3pdqlj/OKLDstYmjtRLkHdZFlVzBo9k52Fwts3:oOk2+liKLDsxQLlVzBYk52d3
- TLSH T1A2C39D217941C037C04A8670045AE365AF7F79312AB8A583F3591FBE6FB13D06A3E25B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-17_83f5d4ca2a2ef88566bdf489e1723d23_amadey_elex_redline-stealer_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_83f5d4ca2a2ef88566bdf489e1723d23_amadey_elex_redline-stealer_smoke-loader_stealc_stop.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_83f5d4ca2a2ef88566bdf489e1723d23_amadey_elex_redline-stealer_smoke-loader_stealc_stop
- Size 123KB
- SHA256 fc1d79676ddd708c113beef8af1bc1036ffbe30ce040122a708f0edbbd1d8378
- MD5 83f5d4ca2a2ef88566bdf489e1723d23
- SHA1 10f898a3c5e9b9c8daffa7cc6b0f85c9e5e1eb9a
- SHA512 18f2d8b272ae98fa9e766ff0e262c612360e4bbe0a6a229d7f3faf92c76083358fc8e452a912a3e55336caec04172f1661bfc8aab9341cb7c5f9fcd25976620b
- SSDEEP 1536:eiAdI+hL+dbM4J3pdqlj/OKLDstYmjtRLkHdZFlVzBo9k52Fwts3:oOk2+liKLDsxQLlVzBYk52d3
- TLSH T1A2C39D217941C037C04A8670045AE365AF7F79312AB8A583F3591FBE6FB13D06A3E25B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.