General
- Target 2026-08-19_8a37e6b831cf19ff4bff329baaffeff0_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 72KB
- Sample260819-2fb5lsvcrf
- SHA256 3fbd9bb882d9d1a308f33d89aa8fa726e19ac3ed074a236ef7696b1e27ed26c5
- MD5 8a37e6b831cf19ff4bff329baaffeff0
- SHA1 3d437081f249ad156b728827be7bc7a5e8ee838a
- SHA512 6f7ecd3a8972a4de822f2d859d587333809a881d089a061fa8ef2c427fd694b9a13c501d35812425584b478197623f159d7d105db221c7ca4dc2b7ca679c9a35
- SSDEEP 768:+00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDw6T6cBJhFd/B5U:+00URPnKfZrT2DawRR8JfP3PZB355B/i
- TLSH T158738E467881C4B2D80054B41426C6929F7FAD1257A5D0CBFB993E7E9F313DB893938E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_8a37e6b831cf19ff4bff329baaffeff0_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_8a37e6b831cf19ff4bff329baaffeff0_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_8a37e6b831cf19ff4bff329baaffeff0_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 72KB
- SHA256 3fbd9bb882d9d1a308f33d89aa8fa726e19ac3ed074a236ef7696b1e27ed26c5
- MD5 8a37e6b831cf19ff4bff329baaffeff0
- SHA1 3d437081f249ad156b728827be7bc7a5e8ee838a
- SHA512 6f7ecd3a8972a4de822f2d859d587333809a881d089a061fa8ef2c427fd694b9a13c501d35812425584b478197623f159d7d105db221c7ca4dc2b7ca679c9a35
- SSDEEP 768:+00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDw6T6cBJhFd/B5U:+00URPnKfZrT2DawRR8JfP3PZB355B/i
- TLSH T158738E467881C4B2D80054B41426C6929F7FAD1257A5D0CBFB993E7E9F313DB893938E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory