General
- Target 2026-11-03_5e738bf41ab0d2b1f5cf72521023ad9b_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 299KB
- Sample261104-x2vrmazt2k
- SHA256 a1c302177ed559bb12e7717033b0983bee48414dd59781449cf10b6ca70a4a85
- MD5 5e738bf41ab0d2b1f5cf72521023ad9b
- SHA1 42744fa1225cd4bae4b837dd884c311b91b7b889
- SHA512 86c682f54a7a7fb46e5908898a57c2e95b31e79811b21252d09be048da2c9f4c2902d51e2edf45d04e3ac88271d2214ada6e9bec80491b71697babab14b29526
- SSDEEP 6144:L+k5XLaJbcplKJmxOYO3rLPFE2NJOdK/wmQ:t+JbMJqfFE27P9Q
- TLSH T188549D553A15C87AE3243F740804F2D009986C7D0ED3A18FE67C787B063A69B5A7769F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-03_5e738bf41ab0d2b1f5cf72521023ad9b_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-03_5e738bf41ab0d2b1f5cf72521023ad9b_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-03_5e738bf41ab0d2b1f5cf72521023ad9b_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 299KB
- SHA256 a1c302177ed559bb12e7717033b0983bee48414dd59781449cf10b6ca70a4a85
- MD5 5e738bf41ab0d2b1f5cf72521023ad9b
- SHA1 42744fa1225cd4bae4b837dd884c311b91b7b889
- SHA512 86c682f54a7a7fb46e5908898a57c2e95b31e79811b21252d09be048da2c9f4c2902d51e2edf45d04e3ac88271d2214ada6e9bec80491b71697babab14b29526
- SSDEEP 6144:L+k5XLaJbcplKJmxOYO3rLPFE2NJOdK/wmQ:t+JbMJqfFE27P9Q
- TLSH T188549D553A15C87AE3243F740804F2D009986C7D0ED3A18FE67C787B063A69B5A7769F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Modifies visibility of hidden/system files in Explorer
Executes dropped EXE
Adds Run key to start application
Drops file in System32 directory
Suspicious use of SetThreadContext