General
- Target 2026-08-26_edb42586bba63709a8bf5d0bfe4a0db8_amadey_elex_karagany_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 23.1MB
- Sample260827-efse9sdk8w
- SHA256 9375b3ab8b749162214a8468f1d3573a450edb859fe87de8e42088c94a925e94
- MD5 edb42586bba63709a8bf5d0bfe4a0db8
- SHA1 17b125c39d741a52c505711eb143e2c1ffe47375
- SHA512 aeade3ffa8fcb60270c9fd9c537bfb60d68a2499c6b557a51872a3f63675c5e6093e203b3a1c0fcee9299dd88f24b1877c4b7b955ab7bc6bf3104d15049c95f7
- SSDEEP 393216:xAVaGJ4WVhnBB5f+qf8vFKeOgi3X46KuV6JqyJos1xk0gXw1h3X8Y8l:GVFLBYqf8v2go4vJDa6xkBrl
- TLSH T18437331363F19C63D50AD4B8761186974AEA2DF1E3EE84A31F697689ACD71D0CF2138C
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-26_edb42586bba63709a8bf5d0bfe4a0db8_amadey_elex_karagany_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-26_edb42586bba63709a8bf5d0bfe4a0db8_amadey_elex_karagany_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 23.1MB
- SHA256 9375b3ab8b749162214a8468f1d3573a450edb859fe87de8e42088c94a925e94
- MD5 edb42586bba63709a8bf5d0bfe4a0db8
- SHA1 17b125c39d741a52c505711eb143e2c1ffe47375
- SHA512 aeade3ffa8fcb60270c9fd9c537bfb60d68a2499c6b557a51872a3f63675c5e6093e203b3a1c0fcee9299dd88f24b1877c4b7b955ab7bc6bf3104d15049c95f7
- SSDEEP 393216:xAVaGJ4WVhnBB5f+qf8vFKeOgi3X46KuV6JqyJos1xk0gXw1h3X8Y8l:GVFLBYqf8v2go4vJDa6xkBrl
- TLSH T18437331363F19C63D50AD4B8761186974AEA2DF1E3EE84A31F697689ACD71D0CF2138C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL