General
- Target 2026-08-19_6132d37ff00ee2def11f592e6c98e887_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 72KB
- Sample260819-nnptsashlc
- SHA256 9a58ee07fb75a5568a79b0475c7213ed581307607c6362b862d0b56594604aa3
- MD5 6132d37ff00ee2def11f592e6c98e887
- SHA1 64ed1457ac409d20529125ddadf633bab21a1065
- SHA512 694380d06d5c471c94e580c32247ba65dd99824485788360087a822154ab470e3a6fa012d8c1bc91d6852627476e7a1231a1c8996da10c2c07713289e4bb60d8
- SSDEEP 1536:+00URPnKfZrT2DawRR8JfP3OiZB355B/:+00URSfsGyRAZB355B
- TLSH T130738E467881C4B2D80054B41826C6929FBFAD1257A5D0CBFB993E7E9F313DB893938D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_6132d37ff00ee2def11f592e6c98e887_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_6132d37ff00ee2def11f592e6c98e887_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_6132d37ff00ee2def11f592e6c98e887_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 72KB
- SHA256 9a58ee07fb75a5568a79b0475c7213ed581307607c6362b862d0b56594604aa3
- MD5 6132d37ff00ee2def11f592e6c98e887
- SHA1 64ed1457ac409d20529125ddadf633bab21a1065
- SHA512 694380d06d5c471c94e580c32247ba65dd99824485788360087a822154ab470e3a6fa012d8c1bc91d6852627476e7a1231a1c8996da10c2c07713289e4bb60d8
- SSDEEP 1536:+00URPnKfZrT2DawRR8JfP3OiZB355B/:+00URSfsGyRAZB355B
- TLSH T130738E467881C4B2D80054B41826C6929FBFAD1257A5D0CBFB993E7E9F313DB893938D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory