General
- Target 2026-11-03_58cd98d8ff0a5fa640e6d789e513c62e_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop_swisyn
- Size 335KB
- Sample261104-ynzdbst1ez
- SHA256 413df6805759627354211aa5956e41c07fcf5ddaf18a9f4166778ec9b347738a
- MD5 58cd98d8ff0a5fa640e6d789e513c62e
- SHA1 c6f9d49295c5951328413e4daac7fa33a75855a2
- SHA512 2dfe808e31d3b6238858a4c299022436508567d2968320666898773680f7c6b767ddec1e718d11ba311cc9484a38584f61a40baaa3bd86dc96aab8f7aa1e8064
- SSDEEP 3072:XVqoCl/YgjxEufVU0TbTyDDalOEJkLnAdeRbvAZpoKIIn9xg//XHTfq2M0W30L/u:XsLqdufVUNDagLAoYZCIn9SzsFwWq4
- TLSH T1BB748E237F10983AC812C9B12CE5C95EBA366D652FA05E07324ABB255B7134379F931F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-03_58cd98d8ff0a5fa640e6d789e513c62e_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop_swisyn.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-03_58cd98d8ff0a5fa640e6d789e513c62e_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop_swisyn.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-03_58cd98d8ff0a5fa640e6d789e513c62e_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop_swisyn
- Size 335KB
- SHA256 413df6805759627354211aa5956e41c07fcf5ddaf18a9f4166778ec9b347738a
- MD5 58cd98d8ff0a5fa640e6d789e513c62e
- SHA1 c6f9d49295c5951328413e4daac7fa33a75855a2
- SHA512 2dfe808e31d3b6238858a4c299022436508567d2968320666898773680f7c6b767ddec1e718d11ba311cc9484a38584f61a40baaa3bd86dc96aab8f7aa1e8064
- SSDEEP 3072:XVqoCl/YgjxEufVU0TbTyDDalOEJkLnAdeRbvAZpoKIIn9xg//XHTfq2M0W30L/u:XsLqdufVUNDagLAoYZCIn9SzsFwWq4
- TLSH T1BB748E237F10983AC812C9B12CE5C95EBA366D652FA05E07324ABB255B7134379F931F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Modifies visibility of hidden/system files in Explorer
Executes dropped EXE
Adds Run key to start application
Drops file in System32 directory