2026-07-12_2de2a842e2b5e4a4ea555b7f69736147_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop

General

Target
2026-07-12_2de2a842e2b5e4a4ea555b7f69736147_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
Size 1.3MB
Sample260712-v3n95aev2q
SHA256 3a1ec24126e12b92a75149aa77cff764b675bca385b6e294a7ccb7eccc5977d5
MD5 2de2a842e2b5e4a4ea555b7f69736147
SHA1 228f205132414c8ee0da1b3b4522a78e93a622b3
SHA512 e12dc2e06bec2b0b59294a43a4127bc6bd0f79b0d275b82e74b420ff28359974259300826d09e9d59eee639b63c14cfdb9a232c9d28cec4c75a10abfcb295cb1
SSDEEP 12288:1n0NPHi4FGyS0VTBG//sop9bw/W1wR/kjy6FtgQAdJsg0HjoMWo:FWCSnQ/tbw/2Mkjy6Fr7g0oo
TLSH
T1A15501217600D476F70A0B704855F5D04AAA4D7C2AD4E64FF6783E3AAA353D34AB728F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-12_2de2a842e2b5e4a4ea555b7f69736147_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop

File Explorer

2026-07-12_2de2a842e2b5e4a4ea555b7f69736147_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop

.exe 1.3MB

2026-07-12_2de2a842e2b5e4a4ea555b7f69736147_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop

IMPHASH 7bddffef2b46e195ecaebbe41901c154
SHA256 3a1ec24126e12b92a75149aa77cff764b675bca385b6e294a7ccb7eccc5977d5
MD5 2de2a842e2b5e4a4ea555b7f69736147
SHA1 228f205132414c8ee0da1b3b4522a78e93a622b3
SHA512 e12dc2e06bec2b0b59294a43a4127bc6bd0f79b0d275b82e74b420ff28359974259300826d09e9d59eee639b63c14cfdb9a232c9d28cec4c75a10abfcb295cb1
SSDEEP 12288:1n0NPHi4FGyS0VTBG//sop9bw/W1wR/kjy6FtgQAdJsg0HjoMWo:FWCSnQ/tbw/2Mkjy6Fr7g0oo
TLSH
T1A15501217600D476F70A0B704855F5D04AAA4D7C2AD4E64FF6783E3AAA353D34AB728F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8552

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\code32\Mains\dfxSharedApp\MtStaticRt\DfxSharedApp32.pdb

kernel32

FlushFileBuffers CloseHandle WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle LCMapStringW LCMapStringA GetStringTypeW GetStringTypeA GetLastError CreateFileA CreateMutexW FreeLibrary GetProcAddress LoadLibraryW GetCurrentProcess GetModuleHandleW GetStartupInfoW GetTickCount MultiByteToWideChar WideCharToMultiByte HeapFree TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement Sleep HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetModuleHandleA LeaveCriticalSection EnterCriticalSection HeapAlloc VirtualAlloc HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage LoadLibraryA InitializeCriticalSectionAndSpinCount RtlUnwind SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoA

user32

RegisterWindowMessageW PostMessageW KillTimer FindWindowW MessageBoxW EndPaint DestroyWindow TranslateAcceleratorW GetMessageW PostQuitMessage LoadCursorW SetTimer TranslateMessage LoadAcceleratorsW RegisterClassExW LoadIconW LoadStringW ShowWindow CreateWindowExW UpdateWindow DefWindowProcW DispatchMessageW BeginPaint

advapi32

RegCloseKey RegOpenKeyExW RegQueryValueExW

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-12_2de2a842e2b5e4a4ea555b7f69736147_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop

kernel32

user32

advapi32

generic