play | 2026-03-11_99e2ca765303437f8f672e6cecc7b561_amadey_elex_play

General

Target
2026-03-11_99e2ca765303437f8f672e6cecc7b561_amadey_elex_play
Size 178KB
Sample260311-e5tdvsev3v
SHA256 f3bf00f492837a94d2ec90e23d6acaed1442b2d9acbfe64609691d1c3dd8f4e7
MD5 99e2ca765303437f8f672e6cecc7b561
SHA1 04158d7a947b687eba0e1f54a2dbc6dc658bb8ce
SHA512 bbd004ccf209f5ded96d5b03d399aaed8a352a8fd772cd55fce31d4b1b669db2d0e65b596f5605534f8ae424b55b51502198db9912c1f367cf07f3e810e810a6
SSDEEP 3072:4jtpykdQOeDkhqikutBYYuoIqjAmGkXNmLxGF/tJr95/fhKJ2ih5cuG:IpH2rEg6Sk9m6tVzEP4
TLSH
T120047D05A7B2D0BAE477043865E99FF5CE2C39350B0148EB6788177969349E2E139F3B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

ransomware play

Play ransomware payload 1 IoCs

ransomware

resource	yara_rule
sample	family_play

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-03-11_99e2ca765303437f8f672e6cecc7b561_amadey_elex_play

IMPHASH bfaffd974eb97f13ae5b4b98aa20c81e
SHA256 f3bf00f492837a94d2ec90e23d6acaed1442b2d9acbfe64609691d1c3dd8f4e7
MD5 99e2ca765303437f8f672e6cecc7b561
SHA1 04158d7a947b687eba0e1f54a2dbc6dc658bb8ce
SHA512 bbd004ccf209f5ded96d5b03d399aaed8a352a8fd772cd55fce31d4b1b669db2d0e65b596f5605534f8ae424b55b51502198db9912c1f367cf07f3e810e810a6
SSDEEP 3072:4jtpykdQOeDkhqikutBYYuoIqjAmGkXNmLxGF/tJr95/fhKJ2ih5cuG:IpH2rEg6Sk9m6tVzEP4
TLSH
T120047D05A7B2D0BAE477043865E99FF5CE2C39350B0148EB6788177969349E2E139F3B
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

6

Entry point

97923

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths