Extracted

• • Target
    2026-08-08_9837529806f15cf1d461260734e8d310_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
  • Size 119KB
  • SHA256 6a9fee864181aa0e6de88cb33fa3da089b9f5e2bbaa81d7a3ffdf25c2f16c363
  • MD5 9837529806f15cf1d461260734e8d310
  • SHA1 67aa45577cf7ef266abe95d9251bad1f465e49d5
  • SHA512 5eaf8eda21c39892a54de0835f1f4ca091eeb456c76accf9c68a1385393aa1f1f8d7039000f7800ae1c21f01d8a4da2458c61fdd1974782bd83916acec3e390d
  • SSDEEP 3072:Jm8DSbca7C7IRJK7tvDo+R059VjgPWyAe:JDDUc+QtcA0lre
  • TLSH
    T104C3DF567650C03BC41650724868C2F19A2FBD3117E5C447BF941BBF6F732DA9A3E28A
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  backdoordefense_evasiondiscoverysalitytrojanupx

  • Family: Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Modifies firewall policy service

    defense_evasion

  • UAC bypass

    defense_evasiontrojan

  • Windows security bypass

    defense_evasiontrojan

  • Detects executables packed with Sality Polymorphic Code Generator or Simple Poly Engine or Sality

  • UPX dump on OEP (original entry point)

  • Windows security modification

    defense_evasiontrojan

  • Checks whether UAC is enabled

    defense_evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2