2026-08-13_c5a32efec0618703f17d4192959b95dc_amadey_coinminer_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop

General

Target
2026-08-13_c5a32efec0618703f17d4192959b95dc_amadey_coinminer_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
Size 2.5MB
Sample260813-pcafdsxzht
SHA256 82d064ce6d644c816ee8997bef4065ca0d74de81be3ac020970c9f54088e3171
MD5 c5a32efec0618703f17d4192959b95dc
SHA1 17847a6b0d63ef12196c91275348318a3a6a920e
SHA512 0b3af2291440b7825ef24319c56623ab8f63ff89e9cbad0ab99600af5edf237b1e02309632f56318e04ee305b1f74dcbd0c4b497398b5aefff4425fd8ce91664
SSDEEP 49152:m7fKZqhaK6zbfqdlIoJdXN0BMOwLloBrugXm:m7yx2JdXN0B7+slm
TLSH
T127C57C1276A5C03AD0B34674896AC7A5E935BE311F31C9CB62803B6D6F727C2C936736
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects executables packed with ASPack 1 IoCs

resource	yara_rule
sample	INDICATOR_EXE_Packed_ASPack

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-13_c5a32efec0618703f17d4192959b95dc_amadey_coinminer_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop

2026-08-13_c5a32efec0618703f17d4192959b95dc_amadey_coinminer_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop

.exe 2.5MB

IMPHASH b941ddedcc51e5706d41335adb4e6b2a
SHA256 82d064ce6d644c816ee8997bef4065ca0d74de81be3ac020970c9f54088e3171
MD5 c5a32efec0618703f17d4192959b95dc
SHA1 17847a6b0d63ef12196c91275348318a3a6a920e
SHA512 0b3af2291440b7825ef24319c56623ab8f63ff89e9cbad0ab99600af5edf237b1e02309632f56318e04ee305b1f74dcbd0c4b497398b5aefff4425fd8ce91664
SSDEEP 49152:m7fKZqhaK6zbfqdlIoJdXN0BMOwLloBrugXm:m7yx2JdXN0B7+slm
TLSH
T127C57C1276A5C03AD0B34674896AC7A5E935BE311F31C9CB62803B6D6F727C2C936736
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

5336

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths