General
- Target 2026-08-18_b1d67aa1d8fe5cafb7ae293e72d2297d_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 1.2MB
- Sample260818-r12kwstglb
- SHA256 970fbd245416ac705afe2b799d618186d38ff159fe4d758113fa97f8a2031831
- MD5 b1d67aa1d8fe5cafb7ae293e72d2297d
- SHA1 dceba0eda952f0969020233d648285bcb574056c
- SHA512 57b2eeecb732c7a8c1c162cb2a59352a0498aaab4183be8b956d6e566ed6f4b570caa7c601af2df723aaf2bdddb155c729de5f4567a7d4cf704d557c1e9510d9
- SSDEEP 24576:6x81dVxvZL1T1csmudbBMYenGJiKEbXWtfOkUy:6x0VxRBi+dGPnRWtGkf
- TLSH T16045AE2661409437CDE4133EAAB9C5706EBDAC169B17846B7300EE9E3D7C0CD69B63B1
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-18_b1d67aa1d8fe5cafb7ae293e72d2297d_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_b1d67aa1d8fe5cafb7ae293e72d2297d_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 1.2MB
- SHA256 970fbd245416ac705afe2b799d618186d38ff159fe4d758113fa97f8a2031831
- MD5 b1d67aa1d8fe5cafb7ae293e72d2297d
- SHA1 dceba0eda952f0969020233d648285bcb574056c
- SHA512 57b2eeecb732c7a8c1c162cb2a59352a0498aaab4183be8b956d6e566ed6f4b570caa7c601af2df723aaf2bdddb155c729de5f4567a7d4cf704d557c1e9510d9
- SSDEEP 24576:6x81dVxvZL1T1csmudbBMYenGJiKEbXWtfOkUy:6x0VxRBi+dGPnRWtGkf
- TLSH T16045AE2661409437CDE4133EAAB9C5706EBDAC169B17846B7300EE9E3D7C0CD69B63B1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.