General
- Target 2026-10-02_f4883000dc9911b9c753cb24fd82c9b0_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 7.3MB
- Sample261002-2fhmdsxtay
- SHA256 f2964f2935110cc72f598f6e793e9c5598b5c8133e2495717a82717c43d491fb
- MD5 f4883000dc9911b9c753cb24fd82c9b0
- SHA1 8ee900be09ec1bd0dd0316132b2ba90ad0ecd7bc
- SHA512 4c1ac7c5d4fc4443238e8f6c8434cb1179e20f0ac4880538eea4f4a17c5778070c8f0688f1a62c32cead8d361029fe054a18e02d251bfceaac2fca87109c8d6b
- SSDEEP 196608:CXHUvzjllMOUR/tuVND6ybFr/n7iJjTqnxXtmm:CKzjllMOUR1uHpFiJPEMm
- TLSH T1B97633A3BF90D273C47328B5A59CC0E14B2275242622C5CBB3DB0BDF9B756E43825369
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-02_f4883000dc9911b9c753cb24fd82c9b0_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-02_f4883000dc9911b9c753cb24fd82c9b0_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-02_f4883000dc9911b9c753cb24fd82c9b0_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 7.3MB
- SHA256 f2964f2935110cc72f598f6e793e9c5598b5c8133e2495717a82717c43d491fb
- MD5 f4883000dc9911b9c753cb24fd82c9b0
- SHA1 8ee900be09ec1bd0dd0316132b2ba90ad0ecd7bc
- SHA512 4c1ac7c5d4fc4443238e8f6c8434cb1179e20f0ac4880538eea4f4a17c5778070c8f0688f1a62c32cead8d361029fe054a18e02d251bfceaac2fca87109c8d6b
- SSDEEP 196608:CXHUvzjllMOUR/tuVND6ybFr/n7iJjTqnxXtmm:CKzjllMOUR1uHpFiJPEMm
- TLSH T1B97633A3BF90D273C47328B5A59CC0E14B2275242622C5CBB3DB0BDF9B756E43825369
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
-
Hide Artifacts: Hidden Files and Directories