General
- Target 2026-10-13_2ae79b185c71fb2cbf24cbb089c2f554_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 72KB
- Sample261015-vr22vaaz2k
- SHA256 600bd31dce6946d592571463e75f16ba28127abd5d6a788e83efe67b1318d528
- MD5 2ae79b185c71fb2cbf24cbb089c2f554
- SHA1 8270e2446615585f71fd22af705a216a466ff93f
- SHA512 34f943371de4c1d72dd6cd273e4522f518e397c91996bbcd477758c8751b55927b1dd52847e671290de5eedbf7d8dabf806512341631e077be085ee0f73842d1
- SSDEEP 768:+00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDwKT6cBJhFd/B5U:+00URPnKfZrT2DawRR8JfP3HZB355B/i
- TLSH T10A738E467881C4B2D80054B41426C6929FBFAD1257A5C0CBFB993E7E9F313DB893938E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-13_2ae79b185c71fb2cbf24cbb089c2f554_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-13_2ae79b185c71fb2cbf24cbb089c2f554_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-13_2ae79b185c71fb2cbf24cbb089c2f554_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 72KB
- SHA256 600bd31dce6946d592571463e75f16ba28127abd5d6a788e83efe67b1318d528
- MD5 2ae79b185c71fb2cbf24cbb089c2f554
- SHA1 8270e2446615585f71fd22af705a216a466ff93f
- SHA512 34f943371de4c1d72dd6cd273e4522f518e397c91996bbcd477758c8751b55927b1dd52847e671290de5eedbf7d8dabf806512341631e077be085ee0f73842d1
- SSDEEP 768:+00UHf57LnWykdBdusOAL/2DH9owR97k9/l4ElXYWFoHiPI6zDwKT6cBJhFd/B5U:+00URPnKfZrT2DawRR8JfP3HZB355B/i
- TLSH T10A738E467881C4B2D80054B41426C6929FBFAD1257A5C0CBFB993E7E9F313DB893938E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory