0c73702311643a56da162a0adf885eaf26fe91a8f45454602fc773508b69bd7f

Analysis

max time kernel
149s
max time network
116s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
15/04/2026, 15:17

Target
2026-04-15_c0581c200fd3d62b3a47c8592faababd_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Size 1.9MB
Sample260415-spdkcsbv9j
SHA256 0c73702311643a56da162a0adf885eaf26fe91a8f45454602fc773508b69bd7f
MD5 c0581c200fd3d62b3a47c8592faababd
SHA1 01aa21dc3a31a88dfad655ca0c60e02649380f42
SHA512 4eff1e607d475420819459b1db08c5ab82609c8211b08529a5ce6b416d001cbf92ec0362c671821d3bd4ce06941b2b661e558c3046a78c66f2ab542be3eb7aba
SSDEEP 24576:OHNgHg3nFoAl94ss86TYFx/WnSyhbzvZOqU1l:Wa/ss1TUWSytLoqUL
TLSH
T16995380DEF500CA7D5612570C426AB5D4770BF742E22E6ABAE50710AFE32FC1693736A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4152	2180	WerFault.exe	79

C:\Users\Admin\AppData\Local\Temp\2026-04-15_c0581c200fd3d62b3a47c8592faababd_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
"C:\Users\Admin\AppData\Local\Temp\2026-04-15_c0581c200fd3d62b3a47c8592faababd_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe"
1⤵
PID:2180
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2180 -s 8
  2⤵
  - Program crash
  PID:4152

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 2180 -ip 2180
1⤵
PID:1720