2026-07-02_770f0d8b51b5b9c28655132c57353fa9_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop

General

Target
2026-07-02_770f0d8b51b5b9c28655132c57353fa9_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
Size 4.6MB
Sample260702-vwtahafy2m
SHA256 2b293bdde0447438ad0eb853d41254d64bae457d692819a02695a19841116c3d
MD5 770f0d8b51b5b9c28655132c57353fa9
SHA1 ea685cb668f7c7c1de65d6e74b32d8f499e815df
SHA512 fe2d6e292b3bbd96af77a60fc302a28cce6beb56c310a4695f989ae3b4b50a0f0c24fec465d918a37e2d6b43b8a5d39d9de91f3765924e59fa21fc5e204b1712
SSDEEP 49152:g2aiWSytLd2nTJPBMO+YrovpU/9FITeqass1TNeW4SkZP4sz9Mb8pYq:vstJROgveqijfkZc86
TLSH
T15D26162EEE748E36D06284B48596A77DE6313C0087224DCB5249BAACFEB3FD15535336
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects executables packed with ASPack 1 IoCs

resource	yara_rule
sample	INDICATOR_EXE_Packed_ASPack

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-02_770f0d8b51b5b9c28655132c57353fa9_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop

2026-07-02_770f0d8b51b5b9c28655132c57353fa9_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop

.exe 4.6MB

IMPHASH b941ddedcc51e5706d41335adb4e6b2a
SHA256 2b293bdde0447438ad0eb853d41254d64bae457d692819a02695a19841116c3d
MD5 770f0d8b51b5b9c28655132c57353fa9
SHA1 ea685cb668f7c7c1de65d6e74b32d8f499e815df
SHA512 fe2d6e292b3bbd96af77a60fc302a28cce6beb56c310a4695f989ae3b4b50a0f0c24fec465d918a37e2d6b43b8a5d39d9de91f3765924e59fa21fc5e204b1712
SSDEEP 49152:g2aiWSytLd2nTJPBMO+YrovpU/9FITeqass1TNeW4SkZP4sz9Mb8pYq:vstJROgveqijfkZc86
TLSH
T15D26162EEE748E36D06284B48596A77DE6313C0087224DCB5249BAACFEB3FD15535336
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

5336

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths