play | 2026-03-11_edf5d8724ce5a964b6c72ca9f7c3edf6_amadey_elex_play

General

Target
2026-03-11_edf5d8724ce5a964b6c72ca9f7c3edf6_amadey_elex_play
Size 178KB
Sample260311-ppdctafs5w
SHA256 79584350c7640da5be39661998e772d07aa1fdd02d504fa6ca7d7d8625df6973
MD5 edf5d8724ce5a964b6c72ca9f7c3edf6
SHA1 82cb37868625f1471b4ae9ea8877d0f009117672
SHA512 b71b7f0dc44e8a91d9e8dc5bdc8186ea9aa3d3f11c43afb2394979ced13d2a3b8897873cc65a150cc67639c9e3d8a8bab8f9218164de99818c46a9dc85f2ef9f
SSDEEP 3072:4jtpykdQOeDkhqikutBYYuoIqjAmGkXNmLxGF/tJr9t/fhKJ2ih5cuG:IpH2rEg6Sk9m6tVnEP4
TLSH
T1A9047D05A7B2D0BAE477043865E99FF5CE2C39350B0148EB6788177969349E2E139F3B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

ransomware play

Play ransomware payload 1 IoCs

ransomware

resource	yara_rule
sample	family_play

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-03-11_edf5d8724ce5a964b6c72ca9f7c3edf6_amadey_elex_play

IMPHASH bfaffd974eb97f13ae5b4b98aa20c81e
SHA256 79584350c7640da5be39661998e772d07aa1fdd02d504fa6ca7d7d8625df6973
MD5 edf5d8724ce5a964b6c72ca9f7c3edf6
SHA1 82cb37868625f1471b4ae9ea8877d0f009117672
SHA512 b71b7f0dc44e8a91d9e8dc5bdc8186ea9aa3d3f11c43afb2394979ced13d2a3b8897873cc65a150cc67639c9e3d8a8bab8f9218164de99818c46a9dc85f2ef9f
SSDEEP 3072:4jtpykdQOeDkhqikutBYYuoIqjAmGkXNmLxGF/tJr9t/fhKJ2ih5cuG:IpH2rEg6Sk9m6tVnEP4
TLSH
T1A9047D05A7B2D0BAE477043865E99FF5CE2C39350B0148EB6788177969349E2E139F3B
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

6

Entry point

97923

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths