General
- Target 2026-09-30_4c8f2e173c88a1c3869da26fbed84805_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 72KB
- Sample261001-r7eppsscmf
- SHA256 107757c8c2c812af4fc23f9e59aa323ba12b3882d3459f5377e858f41b3e0429
- MD5 4c8f2e173c88a1c3869da26fbed84805
- SHA1 12cc675cd70ae9fad351f7f52ac31e1d0744b672
- SHA512 db5225034778b9549d3dd1e47da7f88edfc53ea46382f775139434aed05c42dec2be56b22d5399c11dd63dd85b140ee3edbee4fb1de0129df30d2834abbe6a66
- SSDEEP 768:+00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDwkT6cBJhFd/B5Y:+00URPnKfZrT2DawRR8JfP3pZB355B/
- TLSH T14C738E467881C4B2D80054B41826C6929FBFAD1257A5D0CBFB993E7E9F313DB893938D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-30_4c8f2e173c88a1c3869da26fbed84805_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-30_4c8f2e173c88a1c3869da26fbed84805_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-30_4c8f2e173c88a1c3869da26fbed84805_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 72KB
- SHA256 107757c8c2c812af4fc23f9e59aa323ba12b3882d3459f5377e858f41b3e0429
- MD5 4c8f2e173c88a1c3869da26fbed84805
- SHA1 12cc675cd70ae9fad351f7f52ac31e1d0744b672
- SHA512 db5225034778b9549d3dd1e47da7f88edfc53ea46382f775139434aed05c42dec2be56b22d5399c11dd63dd85b140ee3edbee4fb1de0129df30d2834abbe6a66
- SSDEEP 768:+00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDwkT6cBJhFd/B5Y:+00URPnKfZrT2DawRR8JfP3pZB355B/
- TLSH T14C738E467881C4B2D80054B41826C6929FBFAD1257A5D0CBFB993E7E9F313DB893938D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory