General
- Target 2026-09-09_549ffdea6c3f58574334b198e06168da_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 1.6MB
- Sample260909-ymcg6ssvhs
- SHA256 ab225a03fb7efe383a649544a8ad7dd19ec2758b25d3508836fe1116bfef2010
- MD5 549ffdea6c3f58574334b198e06168da
- SHA1 2f6dd4b8e79a5e17fe0f53aa4977542a6dcd299a
- SHA512 c0499a57f19d2af0c8bfb10dae1095adae4835f1407aee93dd776a3d400ab47514110e2e5f0106b9f098828fb622679e4222e48b4ca0da3fce4f58b9764a5d22
- SSDEEP 24576:d7VKG/tF5T+0jM6UJfz1ET+/pFCkAAYWDhjKeGBXsOtcYA+wtwnMYenGJiKEbXWB:26F0eMpAAYEhpalhwyMPnRWt4+
- TLSH T1DF758E64E683C4F2E92310F1844BE7F669349E1984318C67FBC4FF15BA72D5276BA206
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-09_549ffdea6c3f58574334b198e06168da_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-09_549ffdea6c3f58574334b198e06168da_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 1.6MB
- SHA256 ab225a03fb7efe383a649544a8ad7dd19ec2758b25d3508836fe1116bfef2010
- MD5 549ffdea6c3f58574334b198e06168da
- SHA1 2f6dd4b8e79a5e17fe0f53aa4977542a6dcd299a
- SHA512 c0499a57f19d2af0c8bfb10dae1095adae4835f1407aee93dd776a3d400ab47514110e2e5f0106b9f098828fb622679e4222e48b4ca0da3fce4f58b9764a5d22
- SSDEEP 24576:d7VKG/tF5T+0jM6UJfz1ET+/pFCkAAYWDhjKeGBXsOtcYA+wtwnMYenGJiKEbXWB:26F0eMpAAYEhpalhwyMPnRWt4+
- TLSH T1DF758E64E683C4F2E92310F1844BE7F669349E1984318C67FBC4FF15BA72D5276BA206
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.