General
- Target 2026-09-21_3e3f5a2d892df0718cc976f564d3c5a5_amadey_elex_hijackloader_redline-stealer_rhadamanthys_smoke-loader_stop_swisyn
- Size 186KB
- Sample260922-q3jmeswfle
- SHA256 53b054722ef08b18e2da51e33095392babef5de59ca3e7c1338dd026e541e1e4
- MD5 3e3f5a2d892df0718cc976f564d3c5a5
- SHA1 6b8828fd55ad44a03822806e3f3db6af745daf43
- SHA512 ce11edc5b04acf5d8d81005d0114b7e4bb2b798a1149805ff6d9da78df2958401e37618d07fb871d61f7534f4dd422185422a3dd2774c4b6ab9926f296f208f7
- SSDEEP 3072:UVqoCl/YgjxEufVU0TbTyDDalQl4LZciRI/hk4WJ:UsLqdufVUNDanLZiql
- TLSH T1F2143A13BB505C3FD95185F12CA9E66DFA2A2F3A1BE09C4B3295B7005671243BAF421F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-21_3e3f5a2d892df0718cc976f564d3c5a5_amadey_elex_hijackloader_redline-stealer_rhadamanthys_smoke-loader_stop_swisyn.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-21_3e3f5a2d892df0718cc976f564d3c5a5_amadey_elex_hijackloader_redline-stealer_rhadamanthys_smoke-loader_stop_swisyn.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-21_3e3f5a2d892df0718cc976f564d3c5a5_amadey_elex_hijackloader_redline-stealer_rhadamanthys_smoke-loader_stop_swisyn
- Size 186KB
- SHA256 53b054722ef08b18e2da51e33095392babef5de59ca3e7c1338dd026e541e1e4
- MD5 3e3f5a2d892df0718cc976f564d3c5a5
- SHA1 6b8828fd55ad44a03822806e3f3db6af745daf43
- SHA512 ce11edc5b04acf5d8d81005d0114b7e4bb2b798a1149805ff6d9da78df2958401e37618d07fb871d61f7534f4dd422185422a3dd2774c4b6ab9926f296f208f7
- SSDEEP 3072:UVqoCl/YgjxEufVU0TbTyDDalQl4LZciRI/hk4WJ:UsLqdufVUNDanLZiql
- TLSH T1F2143A13BB505C3FD95185F12CA9E66DFA2A2F3A1BE09C4B3295B7005671243BAF421F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory