General
- Target 2026-09-09_8cca254e483f9f8d41ce72ecb7b5284e_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 72KB
- Sample260909-tmlzdsxgrf
- SHA256 fde992916c75b7e80375a1dcc4c6f18093fe14d674afab9c2b85fe13eb9bb16f
- MD5 8cca254e483f9f8d41ce72ecb7b5284e
- SHA1 5b0d76f58c735bd0b8103d4b0218523b12ab0312
- SHA512 ed8d75a42f7e6978a9ed4b0531ac70741084dba3912b77f19496827b8e4c2c6d94b692e8ace5fa596c06bbc386b1275c806eaf16ce1364b2acc054a23f95e7af
- SSDEEP 768:+00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDwqT6cBJhFd/B5U:+00URPnKfZrT2DawRR8JfP3DZB355B/i
- TLSH T11D738E467881C4B2D80054B41426C6929F7FAD1257A5D0CBFB993E7E9F313DB893938D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-09_8cca254e483f9f8d41ce72ecb7b5284e_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-09_8cca254e483f9f8d41ce72ecb7b5284e_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-09_8cca254e483f9f8d41ce72ecb7b5284e_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 72KB
- SHA256 fde992916c75b7e80375a1dcc4c6f18093fe14d674afab9c2b85fe13eb9bb16f
- MD5 8cca254e483f9f8d41ce72ecb7b5284e
- SHA1 5b0d76f58c735bd0b8103d4b0218523b12ab0312
- SHA512 ed8d75a42f7e6978a9ed4b0531ac70741084dba3912b77f19496827b8e4c2c6d94b692e8ace5fa596c06bbc386b1275c806eaf16ce1364b2acc054a23f95e7af
- SSDEEP 768:+00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDwqT6cBJhFd/B5U:+00URPnKfZrT2DawRR8JfP3DZB355B/i
- TLSH T11D738E467881C4B2D80054B41426C6929F7FAD1257A5D0CBFB993E7E9F313DB893938D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Adds Run key to start application
Drops file in System32 directory