Extracted

• • Target
    2026-08-07_8c876642d390c27639f8cafde2d14125_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
  • Size 123KB
  • SHA256 dbee91a9ae698e61ef57ebdc0fa4a21433202926e4e77654c268f54f174eac07
  • MD5 8c876642d390c27639f8cafde2d14125
  • SHA1 811c62760e532f8f0da3a3c765f9f63d8a4c5b56
  • SHA512 c50b48341464dc76f31ddf505a9dd07ed2c01f8758afd7b19eee8451b5521e2e28828db22c0ca4441c692df04250cf46edf0dd5ba9b0f74606de8a1b0402787b
  • SSDEEP 3072:Qb5DSbca7C7IRJN20p3/9VzozBTVP6quV6vVhGP/gXbe:QFDUc+Nv3X0zXSI1C
  • TLSH
    T103C3E0227500C073D04B44748979C2B25B7FBD3106B5C187BFD41BAB5F622EEAA3A356
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  backdoordefense_evasiondiscoverysalitytrojanupx

  • Family: Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Modifies firewall policy service

    defense_evasion

  • UAC bypass

    defense_evasiontrojan

  • Windows security bypass

    defense_evasiontrojan

  • Detects executables packed with Sality Polymorphic Code Generator or Simple Poly Engine or Sality

  • UPX dump on OEP (original entry point)

  • Windows security modification

    defense_evasiontrojan

  • Checks whether UAC is enabled

    defense_evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2