2026-04-14_37d24ef552e6bee2f3e3428f29c113b4_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop_tofsee

General

Target
2026-04-14_37d24ef552e6bee2f3e3428f29c113b4_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop_tofsee
Size 238KB
Sample260414-2dhvdaby2n
SHA256 0b9dda3315dc25af9b275f50579b15e64c103905bd08b562fda371640f642b12
MD5 37d24ef552e6bee2f3e3428f29c113b4
SHA1 c84d88b105c037d99b0ab6203d4421ab4c1b3e95
SHA512 68060fe231ca13e86f9867151ea13b7eb9d876bbc9e9d00e6fc9234a0eb34e36603eef61095e0ec017a697022792f07baa8cfad8a92f1e756dd2a69b708f896e
SSDEEP 3072:bXjrZwbg56Ks5vIZEyS5VDnrqKxyeqLzy5mivdc7lH3XYpFP7Z:z6sZHSDnuKcnodcJHHYptd
TLSH
T10734BF12B2C1E971C64203315E1ADAE57BBE7B308A6586A7336C562F1B71370C637F68
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-04-14_37d24ef552e6bee2f3e3428f29c113b4_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop_tofsee

File Explorer

2026-04-14_37d24ef552e6bee2f3e3428f29c113b4_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop_tofsee

.exe 238KB

2026-04-14_37d24ef552e6bee2f3e3428f29c113b4_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop_tofsee

SHA256 0b9dda3315dc25af9b275f50579b15e64c103905bd08b562fda371640f642b12
MD5 37d24ef552e6bee2f3e3428f29c113b4
SHA1 c84d88b105c037d99b0ab6203d4421ab4c1b3e95
SHA512 68060fe231ca13e86f9867151ea13b7eb9d876bbc9e9d00e6fc9234a0eb34e36603eef61095e0ec017a697022792f07baa8cfad8a92f1e756dd2a69b708f896e
SSDEEP 3072:bXjrZwbg56Ks5vIZEyS5VDnrqKxyeqLzy5mivdc7lH3XYpFP7Z:z6sZHSDnuKcnodcJHHYptd
TLSH
T10734BF12B2C1E971C64203315E1ADAE57BBE7B308A6586A7336C562F1B71370C637F68
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

23982

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

85KB

Virtual Size

85KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

72KB

Virtual Size

39.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

53KB

Virtual Size

52KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.text

Size

3KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

1024B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-04-14_37d24ef552e6bee2f3e3428f29c113b4_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop_tofsee

generic