General
- Target 2026-10-22_3cb963d6a8d569e6d098fa2c29e8eaa1_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 117KB
- Sample261024-tf54pavxhs
- SHA256 4d1ad8efbb72f1f77e62524b2beb50862429af0ba2942da9fd3c4abe0b011ea5
- MD5 3cb963d6a8d569e6d098fa2c29e8eaa1
- SHA1 d9c7c5f1606f705da42a34e5b0dfa840a7214322
- SHA512 68ec54d39405e661e0944c7d09131ac356147e73d73a78eaa2399768ce1d41401fcc0b0af3ed94311dae696bca8d9efb9c6b09fe935b48fff7b7ae17c6b71125
- SSDEEP 1536:e4Obk1qdPJlTQ3eQMUtCBHMdvX70DfgGrqmscJ8b+TNwOoVgulyIH5JbL3q5qQEp:0lTUezUt7gNj5HZxhEJcqQKRzui
- TLSH T109C3E009B990D172C01541B212378643AF7FA51117B1669B7BE893BF1F322D4AE3A36B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_3cb963d6a8d569e6d098fa2c29e8eaa1_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_3cb963d6a8d569e6d098fa2c29e8eaa1_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_3cb963d6a8d569e6d098fa2c29e8eaa1_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 117KB
- SHA256 4d1ad8efbb72f1f77e62524b2beb50862429af0ba2942da9fd3c4abe0b011ea5
- MD5 3cb963d6a8d569e6d098fa2c29e8eaa1
- SHA1 d9c7c5f1606f705da42a34e5b0dfa840a7214322
- SHA512 68ec54d39405e661e0944c7d09131ac356147e73d73a78eaa2399768ce1d41401fcc0b0af3ed94311dae696bca8d9efb9c6b09fe935b48fff7b7ae17c6b71125
- SSDEEP 1536:e4Obk1qdPJlTQ3eQMUtCBHMdvX70DfgGrqmscJ8b+TNwOoVgulyIH5JbL3q5qQEp:0lTUezUt7gNj5HZxhEJcqQKRzui
- TLSH T109C3E009B990D172C01541B212378643AF7FA51117B1669B7BE893BF1F322D4AE3A36B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.