Extracted

• • Target
    2026-08-09_9c0677b3d40c60967ab5f7317b189f25_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
  • Size 127KB
  • SHA256 3d7163fd4d3888ccae247bf78ba9646c73ac9774af837862c7bb74caea55b0a9
  • MD5 9c0677b3d40c60967ab5f7317b189f25
  • SHA1 c4c58b0ee73dd3d4cfb02ef19ffe7e98d9ecf96a
  • SHA512 fccf50eb8b2c0fa234da2253e458d2ef2ff1369a3fd331ab35298e8105644d3881f666c77ca07772569723404140172c572849bbe23e6a760e94485733d6f313
  • SSDEEP 3072:tFEDSbca7C7IRJlpPxmA1eeLt5hwhhg5BlTo9X+eY:tFEDUc+BmA4eLrhwhhgpXeY
  • TLSH
    T131D3D0267900C03BC11660750935C2F28E7F793116AAC5977FC917AA9F222E9EA3D34B
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  backdoordefense_evasiondiscoverysalitytrojanupx

  • Family: Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Modifies firewall policy service

    defense_evasion

  • UAC bypass

    defense_evasiontrojan

  • Windows security bypass

    defense_evasiontrojan

  • Detects executables packed with Sality Polymorphic Code Generator or Simple Poly Engine or Sality

  • UPX dump on OEP (original entry point)

  • Windows security modification

    defense_evasiontrojan

  • Checks whether UAC is enabled

    defense_evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2