play | 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play

General

Target
2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play
Size 178KB
Sample260314-cx45aaez8s
SHA256 c1815966b53e81111f51d47ed8bc7e8cbaa8853990a996c0f8283d7cc9f2403f
MD5 b4beee7c315c66147dcfc38547ebf116
SHA1 8a83bfc86a891744ac8935f48b81b2845f6b5910
SHA512 54a02968e7582d83ec83dd985ebbcf52588c85de02459cccedb628c17772b362b04342a51ea1c863d25a5843f2800392573872d6a2130e36b4727451da8dbce4
SSDEEP 3072:njtpykdQOem4hqikutDYYuoIqjAmGkXNmLxGF/tJr9t/fhKJ2thu9uKkFei3niBa:xpHTrE26Sk9m6tVnEyV
TLSH
T1C0046B11A7A5D076E472043425E5AFF5CB696D300B0188EB6BC41B7BE9325E2E235F3B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

ransomware play

Play ransomware payload 1 IoCs

ransomware

resource	yara_rule
sample	family_play

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play

IMPHASH bfaffd974eb97f13ae5b4b98aa20c81e
SHA256 c1815966b53e81111f51d47ed8bc7e8cbaa8853990a996c0f8283d7cc9f2403f
MD5 b4beee7c315c66147dcfc38547ebf116
SHA1 8a83bfc86a891744ac8935f48b81b2845f6b5910
SHA512 54a02968e7582d83ec83dd985ebbcf52588c85de02459cccedb628c17772b362b04342a51ea1c863d25a5843f2800392573872d6a2130e36b4727451da8dbce4
SSDEEP 3072:njtpykdQOem4hqikutDYYuoIqjAmGkXNmLxGF/tJr9t/fhKJ2thu9uKkFei3niBa:xpHTrE26Sk9m6tVnEyV
TLSH
T1C0046B11A7A5D076E472043425E5AFF5CB696D300B0188EB6BC41B7BE9325E2E235F3B
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

6

Entry point

97923

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths