General
- Target 2026-09-03_da8a78c37eaef409f0bf1331f3a534e5_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 72KB
- Sample260903-z2wp2aswdv
- SHA256 bbe6d4ac201e2f5424e7f897ba7b3e057328265f8f16c569eb4d43b820d4664c
- MD5 da8a78c37eaef409f0bf1331f3a534e5
- SHA1 e75fbd283f5114cc59f0b58a9df8e5d36d82749f
- SHA512 2dcc422352524205bfefd9eb35fab7bf637541779e70789d55daf4eae22c52edfccf582fb345cb726d854ac0601c54137e451dd987d7e14c1016d5030711641f
- SSDEEP 768:+00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDw5T6cBJhFd/B5U:+00URPnKfZrT2DawRR8JfP34ZB355B/i
- TLSH T181738E467881C4B2D80054B41426C6929FBFAC1257A5D0CBFB993E7E9F313DB893938E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-03_da8a78c37eaef409f0bf1331f3a534e5_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-03_da8a78c37eaef409f0bf1331f3a534e5_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-03_da8a78c37eaef409f0bf1331f3a534e5_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 72KB
- SHA256 bbe6d4ac201e2f5424e7f897ba7b3e057328265f8f16c569eb4d43b820d4664c
- MD5 da8a78c37eaef409f0bf1331f3a534e5
- SHA1 e75fbd283f5114cc59f0b58a9df8e5d36d82749f
- SHA512 2dcc422352524205bfefd9eb35fab7bf637541779e70789d55daf4eae22c52edfccf582fb345cb726d854ac0601c54137e451dd987d7e14c1016d5030711641f
- SSDEEP 768:+00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDw5T6cBJhFd/B5U:+00URPnKfZrT2DawRR8JfP34ZB355B/i
- TLSH T181738E467881C4B2D80054B41426C6929FBFAC1257A5D0CBFB993E7E9F313DB893938E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory