General
- Target 2026-08-23_d09fc7fe02f522d858ee0fc9fc1b2062_amadey_elex_redline-stealer_smoke-loader_stealc_stop
- Size 123KB
- Sample260825-1qa5mazblc
- SHA256 5d8deddfd600f7f4be3a8203f9285cf27a29ef69c220db797fb4af56544d295f
- MD5 d09fc7fe02f522d858ee0fc9fc1b2062
- SHA1 03e059b5e1a21c6fb3ab774ece61df92fff41e4b
- SHA512 c522f38460f1f7cf11a393abcca7d853228dc68ae984ec73d66303a765d0ea16d827d3ca5d24fa7dda95079592cf09059d7f3f835ac777be7663ce7d8492e29b
- SSDEEP 1536:yVYYRiu+5Acd1DlWlhJ3a9MqjBturIk31lFNdrioIlk5adwtsI:CMuDlhURurt/NdrN4k5aFI
- TLSH T13CC37B217941C033C08AA570171AE372EA7D693166B95587F39D0BFA6EB03D0AA3D35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-23_d09fc7fe02f522d858ee0fc9fc1b2062_amadey_elex_redline-stealer_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_d09fc7fe02f522d858ee0fc9fc1b2062_amadey_elex_redline-stealer_smoke-loader_stealc_stop.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_d09fc7fe02f522d858ee0fc9fc1b2062_amadey_elex_redline-stealer_smoke-loader_stealc_stop
- Size 123KB
- SHA256 5d8deddfd600f7f4be3a8203f9285cf27a29ef69c220db797fb4af56544d295f
- MD5 d09fc7fe02f522d858ee0fc9fc1b2062
- SHA1 03e059b5e1a21c6fb3ab774ece61df92fff41e4b
- SHA512 c522f38460f1f7cf11a393abcca7d853228dc68ae984ec73d66303a765d0ea16d827d3ca5d24fa7dda95079592cf09059d7f3f835ac777be7663ce7d8492e29b
- SSDEEP 1536:yVYYRiu+5Acd1DlWlhJ3a9MqjBturIk31lFNdrioIlk5adwtsI:CMuDlhURurt/NdrN4k5aFI
- TLSH T13CC37B217941C033C08AA570171AE372EA7D693166B95587F39D0BFA6EB03D0AA3D35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.