General
- Target 2026-10-22_221226c4e4ac36c600ff310303aeb2c0_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 138KB
- Sample261024-xzp4cswwft
- SHA256 b8d8fd2732d157df5844d079f3b05d46c7b0519313bc75bbee4f5a5a3af2e0cf
- MD5 221226c4e4ac36c600ff310303aeb2c0
- SHA1 8429ed1e926fe239e82cbf3c4abd87dc71947b49
- SHA512 63f1b6772b30758ad733d7229a493d5d27eabc17d682d17bc6094e7dc76eccf32575a0277eb76fa5589f715b4302649264f5ebc16ef0024d0794a3fabc93b2b9
- SSDEEP 1536:e4Obk1qdPJlTQ3eQMUtCBHMdvX70DfgGrqmscJ8b+TNwOoVgwkxcCwxIjr5BFr8m:0lTUezUt7gNj5HZxw0xwCjlr8dqSFa
- TLSH T163D3F1087A80E1B1C066417212B6C652AF7FB51217F1A2977B9693EF1F322C0AE3D757
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_221226c4e4ac36c600ff310303aeb2c0_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_221226c4e4ac36c600ff310303aeb2c0_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_221226c4e4ac36c600ff310303aeb2c0_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 138KB
- SHA256 b8d8fd2732d157df5844d079f3b05d46c7b0519313bc75bbee4f5a5a3af2e0cf
- MD5 221226c4e4ac36c600ff310303aeb2c0
- SHA1 8429ed1e926fe239e82cbf3c4abd87dc71947b49
- SHA512 63f1b6772b30758ad733d7229a493d5d27eabc17d682d17bc6094e7dc76eccf32575a0277eb76fa5589f715b4302649264f5ebc16ef0024d0794a3fabc93b2b9
- SSDEEP 1536:e4Obk1qdPJlTQ3eQMUtCBHMdvX70DfgGrqmscJ8b+TNwOoVgwkxcCwxIjr5BFr8m:0lTUezUt7gNj5HZxw0xwCjlr8dqSFa
- TLSH T163D3F1087A80E1B1C066417212B6C652AF7FB51217F1A2977B9693EF1F322C0AE3D757
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.