General

  • Target
    2026-05-23_dd197582c682bb1ac4a8ae07e6bab803_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
  • Size 4.0MB
  • Sample260523-hpcyqaev3p
  • SHA256 dabe028a0a9d532f4aa136e22fb1fddb21b55e466a9bfc9a04150918ba73180a
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • 2026-05-23_dd197582c682bb1ac4a8ae07e6bab803_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
    .exe 4.0MB

2026-05-23_dd197582c682bb1ac4a8ae07e6bab803_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop

  • IMPHASH 8457aafc795c346d486e85854223fffd
  • SHA256 dabe028a0a9d532f4aa136e22fb1fddb21b55e466a9bfc9a04150918ba73180a
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
a3:cf:d9:7d:e0:f0:4b:17:e4:b0:45:10:52:58:f7:f9:7a:39:82:18:5b:c8:ce:ea:7c:56:e3:3e:cc:08:e8:22
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
POSTALCODE=10305
Minor OS version
0
Major OS version
5
Entry point
13942
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\zitinepix\vizeyejede-56 yotigepoyomemo-85\pepivak.pdb