General
- Target 2026-09-09_9c3477e8128970d2939ede75217d62ac_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 1.6MB
- Sample260909-sdlrlaxbrb
- SHA256 71f2a638362cb79f8ae0fab0b640f13239da1f49481a299e2457d00919be54f8
- MD5 9c3477e8128970d2939ede75217d62ac
- SHA1 cedcd48d6d4327c632d209529173e70d11de4b3c
- SHA512 6535cf66b3521418205881266f0ea14b24dcce791aceea0a6c3cf5f9016eba509464a89d0f6a56a7bf221f18a52ffa66ff0fcb49274f4404284ce4f87a97bff7
- SSDEEP 24576:77VKG/tF5T+0jM6UJfz1ET+/pFCkAAYWDhjKeGBXsOxpiYA+wBxnMYenGJiKEbXi:Y6F0eMpAAYEhpsjhwfMPnRWt4s
- TLSH T129759E64E78380F1E93300F1461BE7FA6A389E194031CC6BEBC4EF157A76952767A316
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-09_9c3477e8128970d2939ede75217d62ac_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-09_9c3477e8128970d2939ede75217d62ac_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 1.6MB
- SHA256 71f2a638362cb79f8ae0fab0b640f13239da1f49481a299e2457d00919be54f8
- MD5 9c3477e8128970d2939ede75217d62ac
- SHA1 cedcd48d6d4327c632d209529173e70d11de4b3c
- SHA512 6535cf66b3521418205881266f0ea14b24dcce791aceea0a6c3cf5f9016eba509464a89d0f6a56a7bf221f18a52ffa66ff0fcb49274f4404284ce4f87a97bff7
- SSDEEP 24576:77VKG/tF5T+0jM6UJfz1ET+/pFCkAAYWDhjKeGBXsOxpiYA+wBxnMYenGJiKEbXi:Y6F0eMpAAYEhpsjhwfMPnRWt4s
- TLSH T129759E64E78380F1E93300F1461BE7FA6A389E194031CC6BEBC4EF157A76952767A316
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.