2026-04-18_04778488757c02b7fd158117128e06e0_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop_tofsee

Sharing

Copy URL Twitter E-mail

General

Target
2026-04-18_04778488757c02b7fd158117128e06e0_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop_tofsee
Size 326KB
Sample260418-e27r3sgw2w
SHA256 f60ca33817583431172b13cc9968f8e8e8d1d943e41f35f90d6b03786ac64bde
MD5 04778488757c02b7fd158117128e06e0
SHA1 caa6217c985ee869bc72f952151a726bea67138d
SHA512 d14b1163b5b17ac68ab7e601c5afe7b85a932a952e2639c35b6400567db81473a292f2f914f8a921af4116d9de4ae69958bda6fb86791806442cadc7fdf0c3ff
SSDEEP 6144:tBJLtqe5nc1pmbSFQRdbFnrNGpMskFQH2YpJTRoaxHx0m/Ym:tBJRqe5ncPmbSCRjrURkFo2Yv1xHx0m
TLSH
T1BB64CF02FADB9A71C2400F315D1ADAE57BBE68307A358A6F2238D51F5A707E09377274
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-04-18_04778488757c02b7fd158117128e06e0_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop_tofsee

File Explorer

2026-04-18_04778488757c02b7fd158117128e06e0_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop_tofsee

.exe 326KB

2026-04-18_04778488757c02b7fd158117128e06e0_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop_tofsee

SHA256 f60ca33817583431172b13cc9968f8e8e8d1d943e41f35f90d6b03786ac64bde
MD5 04778488757c02b7fd158117128e06e0
SHA1 caa6217c985ee869bc72f952151a726bea67138d
SHA512 d14b1163b5b17ac68ab7e601c5afe7b85a932a952e2639c35b6400567db81473a292f2f914f8a921af4116d9de4ae69958bda6fb86791806442cadc7fdf0c3ff
SSDEEP 6144:tBJLtqe5nc1pmbSFQRdbFnrNGpMskFQH2YpJTRoaxHx0m/Ym:tBJRqe5ncPmbSCRjrURkFo2Yv1xHx0m
TLSH
T1BB64CF02FADB9A71C2400F315D1ADAE57BBE68307A358A6F2238D51F5A707E09377274
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

25404

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.reloc

Size

84KB

Virtual Size

83KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

71KB

Virtual Size

39.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.text

Size

106KB

Virtual Size

106KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

1024B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

1024B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

6KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

2KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

5KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.text

Size

7KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-04-18_04778488757c02b7fd158117128e06e0_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop_tofsee

generic