2026-08-04_fed4bca22f70b63feb4d0a063f740176_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop

General

Target
2026-08-04_fed4bca22f70b63feb4d0a063f740176_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
Size 337KB
Sample260805-aahxesfr9s
SHA256 2d2cf00f1e1b4f6f96aa63035d46c801667ed01f2dec265a33100dd81472cbb3
MD5 fed4bca22f70b63feb4d0a063f740176
SHA1 bfe2ea0e2db5e269aab762eecab75ed8f9e3873c
SHA512 e04d4a1003b47e564bac3f694c49aa2559548f438dabaeef7050aba6addb6614b50183baa5f73ef81ea086881823a72a9b81ad44622e6e858a17587762551d55
SSDEEP 6144:ZYUmpnbUG4BDB3j8CjN6RZOJs+9TbmRE8z2kajEXgoua44og3:7SnQBDF8CjGb+0Rzzp5Rv4C
TLSH
T1E974F120BAD1D0B1C5AB44350522FAA07A7FB87269F6919B771407FF1E307C19ABB706
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-04_fed4bca22f70b63feb4d0a063f740176_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop

File Explorer

2026-08-04_fed4bca22f70b63feb4d0a063f740176_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop

.exe 337KB

2026-08-04_fed4bca22f70b63feb4d0a063f740176_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop

IMPHASH ab6a1f3e3b2e868d2b29ae16c796885b
SHA256 2d2cf00f1e1b4f6f96aa63035d46c801667ed01f2dec265a33100dd81472cbb3
MD5 fed4bca22f70b63feb4d0a063f740176
SHA1 bfe2ea0e2db5e269aab762eecab75ed8f9e3873c
SHA512 e04d4a1003b47e564bac3f694c49aa2559548f438dabaeef7050aba6addb6614b50183baa5f73ef81ea086881823a72a9b81ad44622e6e858a17587762551d55
SSDEEP 6144:ZYUmpnbUG4BDB3j8CjN6RZOJs+9TbmRE8z2kajEXgoua44og3:7SnQBDF8CjGb+0Rzzp5Rv4C
TLSH
T1E974F120BAD1D0B1C5AB44350522FAA07A7FB87269F6919B771407FF1E307C19ABB706
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

20116

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\juh83\joyoralenucibe\paxumibuvosu 67\h.pdb

kernel32

QueryPerformanceCounter FindCloseChangeNotification BackupSeek FreeEnvironmentStringsA GetModuleHandleW EnumCalendarInfoExW VirtualFree ConvertFiberToThread ReadConsoleW EnumTimeFormatsA EnumResourceTypesA SetHandleCount LoadLibraryW SetCommConfig GetConsoleWindow GetFileAttributesW EnumSystemLocalesA InterlockedExchange GetProfileIntA GetCPInfoExW FillConsoleOutputCharacterW GetLastError InterlockedDecrement GetProcAddress AttachConsole VirtualAlloc HeapSize BeginUpdateResourceW WriteProfileSectionA LoadLibraryA LocalAlloc OpenEventA RemoveDirectoryW PostQueuedCompletionStatus FoldStringA EnumDateFormatsA GetModuleHandleA HeapSetInformation VirtualProtect ScrollConsoleScreenBufferA GetShortPathNameW GetWindowsDirectoryW AddConsoleAliasA DebugBreak GetSystemDefaultUILanguage Sleep ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapFree EnterCriticalSection LeaveCriticalSection RtlUnwind GetStdHandle GetFileType DeleteCriticalSection RaiseException TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc CloseHandle CreateFileA GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetConsoleCP GetConsoleMode FlushFileBuffers SetStdHandle SetFilePointer SetEndOfFile GetProcessHeap MultiByteToWideChar ReadFile LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW WriteConsoleA GetConsoleOutputCP WriteConsoleW

gdi32

GetCharWidthA GetCharWidthI

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-04_fed4bca22f70b63feb4d0a063f740176_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop

kernel32

gdi32

generic