2026-08-14_f5751fba8687e371a5fafcf8f0edf4e7_amadey_coinminer_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop

General

Target
2026-08-14_f5751fba8687e371a5fafcf8f0edf4e7_amadey_coinminer_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
Size 3.0MB
Sample260815-chvbjadc79
SHA256 cc303c1cb648a1dabf3f9b665b3dc69e36ebc3389f8712856d68eda1559b87e3
MD5 f5751fba8687e371a5fafcf8f0edf4e7
SHA1 1d30255e5ee83447bed5417cf6f2ea5e9a671275
SHA512 3c84c70d7f4fb499709fb4dca05090cc7a73efbbb11e5339b03529d4f74d310669e5243e4c5ea5b253f01267913731e427d446a95d052cc1880ec4419a55967b
SSDEEP 49152:m7fKZqhaK6zbfqdlIoJdXN0BMOwLloBrugXrqJtb2I:m7yx2JdXN0B7+slr
TLSH
T1A4E56B11B6A4C136E0B38575C9A697AAE9317D211F31C9CB62807B6D2F737C2C936732
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects executables packed with ASPack 1 IoCs

resource	yara_rule
sample	INDICATOR_EXE_Packed_ASPack

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-14_f5751fba8687e371a5fafcf8f0edf4e7_amadey_coinminer_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop

2026-08-14_f5751fba8687e371a5fafcf8f0edf4e7_amadey_coinminer_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop

.exe 3.0MB

IMPHASH b941ddedcc51e5706d41335adb4e6b2a
SHA256 cc303c1cb648a1dabf3f9b665b3dc69e36ebc3389f8712856d68eda1559b87e3
MD5 f5751fba8687e371a5fafcf8f0edf4e7
SHA1 1d30255e5ee83447bed5417cf6f2ea5e9a671275
SHA512 3c84c70d7f4fb499709fb4dca05090cc7a73efbbb11e5339b03529d4f74d310669e5243e4c5ea5b253f01267913731e427d446a95d052cc1880ec4419a55967b
SSDEEP 49152:m7fKZqhaK6zbfqdlIoJdXN0BMOwLloBrugXrqJtb2I:m7yx2JdXN0B7+slr
TLSH
T1A4E56B11B6A4C136E0B38575C9A697AAE9317D211F31C9CB62807B6D2F737C2C936732
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

5336

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths