2026-08-09_818d05c57445f997cd5dee2297486c94_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-09_818d05c57445f997cd5dee2297486c94_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
Size 437KB
Sample260809-l3ldssvgqf
SHA256 1f0b588f8227b3fd087f300c25c6bc4e6c7452fb6edd27ee8876ff9afc5800bc
MD5 818d05c57445f997cd5dee2297486c94
SHA1 5958e778c0eb3285d809b3dcd4ae73a6ccd4ac86
SHA512 2b4b8c67bd0d8d97ee9f7eeee86b06a0b01a72add9152c36b452417a2398b1c201dfcf23e5912b217b2414917209d44412c7ddef9bad2812fcd1186958331215
SSDEEP 12288:etancVaZ/+KZtIA3DboWh5ysclfBXxWYMK6Kn3OYwoR:ekUaZW6tI+boy5yhtBX6Kn3OYw
TLSH
T10D9412163683D831C51152BCA868C3B0AB3DBD222574D597BBFA5FBBBE241D05F15381
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-09_818d05c57445f997cd5dee2297486c94_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop

File Explorer

2026-08-09_818d05c57445f997cd5dee2297486c94_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop

.exe 437KB

2026-08-09_818d05c57445f997cd5dee2297486c94_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop

IMPHASH eae719b7384e30dfa50a17f56fc10efb
SHA256 1f0b588f8227b3fd087f300c25c6bc4e6c7452fb6edd27ee8876ff9afc5800bc
MD5 818d05c57445f997cd5dee2297486c94
SHA1 5958e778c0eb3285d809b3dcd4ae73a6ccd4ac86
SHA512 2b4b8c67bd0d8d97ee9f7eeee86b06a0b01a72add9152c36b452417a2398b1c201dfcf23e5912b217b2414917209d44412c7ddef9bad2812fcd1186958331215
SSDEEP 12288:etancVaZ/+KZtIA3DboWh5ysclfBXxWYMK6Kn3OYwoR:ekUaZW6tI+boy5yhtBX6Kn3OYw
TLSH
T10D9412163683D831C51152BCA868C3B0AB3DBD222574D597BBFA5FBBBE241D05F15381
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

7490

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

shlwapi

PathAddBackslashA PathStripPathA AssocQueryStringA PathRemoveFileSpecA

version

VerQueryValueA GetFileVersionInfoA GetFileVersionInfoSizeA

kernel32

CompareStringA FlushFileBuffers HeapSize GetLocaleInfoA GetModuleFileNameA FindResourceA GetModuleHandleA SizeofResource LoadResource CompareStringW CreateDirectoryA GetTempFileNameA DeleteFileA CreateFileA WriteFile CloseHandle CreateProcessA Sleep RemoveDirectoryA GetTempPathA GetStdHandle GetStringTypeW HeapAlloc GetLastError HeapFree FindClose FileTimeToSystemTime FileTimeToLocalFileTime GetDriveTypeA FindFirstFileA GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate GetModuleHandleW GetProcAddress ExitProcess SetEnvironmentVariableA GetFullPathNameA GetCurrentDirectoryA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount RtlUnwind LoadLibraryA GetTimeZoneInformation LCMapStringA MultiByteToWideChar LCMapStringW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW GetStringTypeA

user32

MessageBoxA

advapi32

ConvertStringSecurityDescriptorToSecurityDescriptorA

shell32

ShellExecuteA

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-09_818d05c57445f997cd5dee2297486c94_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop

shlwapi

version

kernel32

user32

advapi32

shell32

generic