Overview

overview

10

Static

static

3

2026-05-23...op.exe

windows10-2004-x64

10

2026-05-23...op.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    2026-05-23_f5ab2cf4909843149b5544adbcee97c2_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
  • Size 4.1MB
  • Sample260523-hrcezaev5l
  • SHA256 db537511dc9a0e3db8278cda0c51f66e140d4552d3f6675c50196f55d11e586a
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • 2026-05-23_f5ab2cf4909843149b5544adbcee97c2_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
    .exe 4.1MB

2026-05-23_f5ab2cf4909843149b5544adbcee97c2_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop

  • IMPHASH e8e661a38e14e660bf8d40ad7ce84bcd
  • SHA256 db537511dc9a0e3db8278cda0c51f66e140d4552d3f6675c50196f55d11e586a
  • MD5 SHA1 SHA512 SSDEEP TLSH
windows:5windowsx86arch:x86

  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
6a:26:94:81:16:bb:b3:c6:69:09:ed:e4:58:fb:fe:ed:ec:f1:92:aa:8b:58:f5:65:c1:53:f6:a6:31:a8:8b:45
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
POSTALCODE=10305
Minor OS version
0
Major OS version
5
Entry point
27456
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\yudela\zoripihuho.pdb