play | 2026-03-16_b8ed176f902dbd005d7b663961d1c04b_amadey_elex_play

General

Target
2026-03-16_b8ed176f902dbd005d7b663961d1c04b_amadey_elex_play
Size 178KB
Sample260316-cbb7daax3s
SHA256 d743728c1492063525534e1c67fc15e8bf241928f87cd64a509db8cb62955abe
MD5 b8ed176f902dbd005d7b663961d1c04b
SHA1 5aaa22343fb6b0399878c94883246e1846b5da32
SHA512 882f3ea5d06fe3b995958b3b4f8a73c087cb8af5b1c2f2f89e0e9a073d42adda4585093838946c026f75846114141e0ab6fa59b251f69b240ee8b8f21ba3b032
SSDEEP 3072:4jtpykdQOeDkhqikutBYYuoIqjAmGkXNmLxGF/tJr9t/fhKJ2ihFcuG:IpH2rEg6Sk9m6tVnEP0
TLSH
T17A047D05A7B2D0BAE477043865E99FF5CE2C39350B0148EB6788177969349E2E139F3B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

ransomware play

Play ransomware payload 1 IoCs

ransomware

resource	yara_rule
sample	family_play

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-03-16_b8ed176f902dbd005d7b663961d1c04b_amadey_elex_play

IMPHASH bfaffd974eb97f13ae5b4b98aa20c81e
SHA256 d743728c1492063525534e1c67fc15e8bf241928f87cd64a509db8cb62955abe
MD5 b8ed176f902dbd005d7b663961d1c04b
SHA1 5aaa22343fb6b0399878c94883246e1846b5da32
SHA512 882f3ea5d06fe3b995958b3b4f8a73c087cb8af5b1c2f2f89e0e9a073d42adda4585093838946c026f75846114141e0ab6fa59b251f69b240ee8b8f21ba3b032
SSDEEP 3072:4jtpykdQOeDkhqikutBYYuoIqjAmGkXNmLxGF/tJr9t/fhKJ2ihFcuG:IpH2rEg6Sk9m6tVnEP0
TLSH
T17A047D05A7B2D0BAE477043865E99FF5CE2C39350B0148EB6788177969349E2E139F3B
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

6

Entry point

97923

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths