2026-08-07_27b4c030415e52419968caa8a5b1879e_amadey_coinminer_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop

General

Target
2026-08-07_27b4c030415e52419968caa8a5b1879e_amadey_coinminer_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
Size 4.6MB
Sample260808-b4degaxfng
SHA256 e71b80ecb8712c3cd7ac8644a6faaaaff31b8ff87f968e81eda2d3ef6399be10
MD5 27b4c030415e52419968caa8a5b1879e
SHA1 56416b876f887d1d3c6d1de55a396eaa64f20bfc
SHA512 d3e80f144be6ecc1599ae01d89174c0beeee6e3b08433c83f246a22dd698ebd89a586ac5ac064fd5d86789934901e12cb131b0c34e29a28789e0526d873d4734
SSDEEP 49152:T2aDHXAWSytLoqUCInTUCIabjKoh9WEbtL2tLlZqhaK6zbfqdlIhKPgssSt2gTBr:+stsF7IabjKoh9WyV2Vlx/hv7St0OgO
TLSH
T183268D217BE48035E1B795B1A9BAD366D9717C604B7182CF63807B3E1F72AD05A72323
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

aspackv2

Detects executables packed with ASPack 1 IoCs

resource	yara_rule
sample	INDICATOR_EXE_Packed_ASPack

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-07_27b4c030415e52419968caa8a5b1879e_amadey_coinminer_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop

2026-08-07_27b4c030415e52419968caa8a5b1879e_amadey_coinminer_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop

.exe 4.6MB

SHA256 e71b80ecb8712c3cd7ac8644a6faaaaff31b8ff87f968e81eda2d3ef6399be10
MD5 27b4c030415e52419968caa8a5b1879e
SHA1 56416b876f887d1d3c6d1de55a396eaa64f20bfc
SHA512 d3e80f144be6ecc1599ae01d89174c0beeee6e3b08433c83f246a22dd698ebd89a586ac5ac064fd5d86789934901e12cb131b0c34e29a28789e0526d873d4734
SSDEEP 49152:T2aDHXAWSytLoqUCInTUCIabjKoh9WEbtL2tLlZqhaK6zbfqdlIhKPgssSt2gTBr:+stsF7IabjKoh9WyV2Vlx/hv7St0OgO
TLSH
T183268D217BE48035E1B795B1A9BAD366D9717C604B7182CF63807B3E1F72AD05A72323
MD5 SHA1 SHA512 SSDEEP TLSH

Detects executables packed with ASPack
ASPack v2.12-2.42

Detects executables packed with ASPack v2.12-2.42

aspackv2
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

36865

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths