General
- Target 2026-10-22_ec6dc5338703d839b396bee9ea8fc155_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 125KB
- Sample261023-ef3agawtht
- SHA256 62b90251489f15953f0418f3fe87a9d5b3ab7f11dcf0e9ba51aab4bf0bcc26a0
- MD5 ec6dc5338703d839b396bee9ea8fc155
- SHA1 5b1bf2433e44ed8209de30e00246cc57d658c717
- SHA512 697e2e6f34ca6a52209148e93413b8a1f180ba74709789de3e9af4b5be554167ef89f4578a64e37eb2b407699698c621c63046b8cf5024e1fbdf895f99726504
- SSDEEP 3072:GeR8Y6hDyAyQIrZBbSJKoVavyuAVxiPAj:GeR8Y6lRYZoV4C6
- TLSH T10CC3AD137B52D031C81048310856C3966B6DFD225B79EE93B3967F7A2F323D1AB2664B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_ec6dc5338703d839b396bee9ea8fc155_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_ec6dc5338703d839b396bee9ea8fc155_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_ec6dc5338703d839b396bee9ea8fc155_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 125KB
- SHA256 62b90251489f15953f0418f3fe87a9d5b3ab7f11dcf0e9ba51aab4bf0bcc26a0
- MD5 ec6dc5338703d839b396bee9ea8fc155
- SHA1 5b1bf2433e44ed8209de30e00246cc57d658c717
- SHA512 697e2e6f34ca6a52209148e93413b8a1f180ba74709789de3e9af4b5be554167ef89f4578a64e37eb2b407699698c621c63046b8cf5024e1fbdf895f99726504
- SSDEEP 3072:GeR8Y6hDyAyQIrZBbSJKoVavyuAVxiPAj:GeR8Y6lRYZoV4C6
- TLSH T10CC3AD137B52D031C81048310856C3966B6DFD225B79EE93B3967F7A2F323D1AB2664B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Modifies visibility of file extensions in Explorer
-
Modifies visibility of hidden/system files in Explorer
MITRE ATT&CK Enterprise v16
Privilege Escalation
Create or Modify System Process
1Windows Service
1Process Injection
1Defense Evasion
Hide Artifacts
2Hidden Files and Directories
2Impair Defenses
1Disable or Modify System Firewall
1Modify Registry
3Process Injection
1