General
- Target 2026-08-20_54cb56cc77fc13852717c3137acc75a0_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 147KB
- Sample260820-cxd8vsybra
- SHA256 c7ae420cc12a8cb0509bae59e113cbe940962062fcb9e5709a22e44496cefedd
- MD5 54cb56cc77fc13852717c3137acc75a0
- SHA1 375351dd5c37dd1c9561cfa4d8c422d16638383f
- SHA512 b47ed37f65b58e04f576f881dd43279090a06e2f9727a69c9d436836b72020d70ac28369487f16268626add4dd345c8a55c9ce901fa85d361edc25a95953b246
- SSDEEP 1536:YrgR9ieUOc+/RAhDcaPLXbbsEyQIrZBQlgSJ0beIObNxLSlikLaaYZjflei:GgR8Y6hDaEyQIrZBbSJ+cJFFpjd/
- TLSH T109E36C127F01A83AC0104430495BA645D7BDBE310A69AA43B747FF6F2E313DDEB6526E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_54cb56cc77fc13852717c3137acc75a0_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_54cb56cc77fc13852717c3137acc75a0_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win11ltsc2024-20260710-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_54cb56cc77fc13852717c3137acc75a0_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 147KB
- SHA256 c7ae420cc12a8cb0509bae59e113cbe940962062fcb9e5709a22e44496cefedd
- MD5 54cb56cc77fc13852717c3137acc75a0
- SHA1 375351dd5c37dd1c9561cfa4d8c422d16638383f
- SHA512 b47ed37f65b58e04f576f881dd43279090a06e2f9727a69c9d436836b72020d70ac28369487f16268626add4dd345c8a55c9ce901fa85d361edc25a95953b246
- SSDEEP 1536:YrgR9ieUOc+/RAhDcaPLXbbsEyQIrZBQlgSJ0beIObNxLSlikLaaYZjflei:GgR8Y6hDaEyQIrZBbSJ+cJFFpjd/
- TLSH T109E36C127F01A83AC0104430495BA645D7BDBE310A69AA43B747FF6F2E313DDEB6526E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Modifies visibility of file extensions in Explorer
-
Modifies visibility of hidden/system files in Explorer
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
2Hidden Files and Directories
2Impair Defenses
1Disable or Modify System Firewall
1Modify Registry
3