General
- Target 2026-08-19_7378e18209e3aabbbf2e0b1f9a806820_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 72KB
- Sample260819-2lespavejg
- SHA256 450ccd9454323b1531f1a24ba03f804a45d0b7d24b0e645f155fb627f6f6549d
- MD5 7378e18209e3aabbbf2e0b1f9a806820
- SHA1 1e0a6d1b0a7d4bbfd0347452ec74eff60f6c83d6
- SHA512 287637e4b83e48ddfadd5726e8988d2947cd8967f3326bf7d6de3acd20ea7e3ff6906feac392078eb74398e6e6ff57323a35f406cbc5d092c511c29912f0cc05
- SSDEEP 768:+00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDwqT6cBJhFd/B5U:+00URPnKfZrT2DawRR8JfP37ZB355B/i
- TLSH T1F9738E467881C4B2D80054B41426C6929FBFAD1257A5D0CBFB993E7E9F313DB893938E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_7378e18209e3aabbbf2e0b1f9a806820_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_7378e18209e3aabbbf2e0b1f9a806820_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_7378e18209e3aabbbf2e0b1f9a806820_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 72KB
- SHA256 450ccd9454323b1531f1a24ba03f804a45d0b7d24b0e645f155fb627f6f6549d
- MD5 7378e18209e3aabbbf2e0b1f9a806820
- SHA1 1e0a6d1b0a7d4bbfd0347452ec74eff60f6c83d6
- SHA512 287637e4b83e48ddfadd5726e8988d2947cd8967f3326bf7d6de3acd20ea7e3ff6906feac392078eb74398e6e6ff57323a35f406cbc5d092c511c29912f0cc05
- SSDEEP 768:+00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDwqT6cBJhFd/B5U:+00URPnKfZrT2DawRR8JfP37ZB355B/i
- TLSH T1F9738E467881C4B2D80054B41426C6929FBFAD1257A5D0CBFB993E7E9F313DB893938E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory