General
- Target 2026-08-18_182bcb00ffbf7c9bbc5c84bb5ed4a015_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 72KB
- Sample260819-aet59atale
- SHA256 d20adc617d29cb600296dfd4c9d9eb32d3451f953b1c6e1fdc16477601a6ba49
- MD5 182bcb00ffbf7c9bbc5c84bb5ed4a015
- SHA1 91bd44199b9ae5cabf6f1f4da941dedf708c6d98
- SHA512 1b682c6a35ebf98a666acfcc45ac463e38d63a42f062ad1cb73ccfc05543ec72e6114221e12ac60f92c421bfa6bdb426888c67d464b4a9465302a1a7af7a3aad
- SSDEEP 768:+00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDwFT6cBJhFd/B5x:+00URPnKfZrT2DawRR8JfP3MZB355B/L
- TLSH T1FA738E467881C4B2D80054B41426C6929F7FAD1257A5D0CBFB993E7E9F313DB893938E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-18_182bcb00ffbf7c9bbc5c84bb5ed4a015_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-18_182bcb00ffbf7c9bbc5c84bb5ed4a015_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_182bcb00ffbf7c9bbc5c84bb5ed4a015_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 72KB
- SHA256 d20adc617d29cb600296dfd4c9d9eb32d3451f953b1c6e1fdc16477601a6ba49
- MD5 182bcb00ffbf7c9bbc5c84bb5ed4a015
- SHA1 91bd44199b9ae5cabf6f1f4da941dedf708c6d98
- SHA512 1b682c6a35ebf98a666acfcc45ac463e38d63a42f062ad1cb73ccfc05543ec72e6114221e12ac60f92c421bfa6bdb426888c67d464b4a9465302a1a7af7a3aad
- SSDEEP 768:+00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDwFT6cBJhFd/B5x:+00URPnKfZrT2DawRR8JfP3MZB355B/L
- TLSH T1FA738E467881C4B2D80054B41426C6929F7FAD1257A5D0CBFB993E7E9F313DB893938E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory