2026-08-21_f361edfc041b5727a2f9a31bb494abdc_amadey_elex_karagany_redline-stealer_rhadamanthys_smoke-loader

General

Target
2026-08-21_f361edfc041b5727a2f9a31bb494abdc_amadey_elex_karagany_redline-stealer_rhadamanthys_smoke-loader
Size 54KB
Sample260821-brdjpsek71
SHA256 7f42d177f7f2f15296d0587ceb8dd1817d19870a3a8022824cc7e686db8c5cd3
MD5 f361edfc041b5727a2f9a31bb494abdc
SHA1 fdc83da20994f42106a4dde8a297975c445bab36
SHA512 75e33b006de2ecddb05f9d85e12b97de14186a30f9b910c4bb6889ca9009fb5f4cbe55e6b7646116b7d0cf0e77dd4963344305e27644da4748cbc90050697b83
SSDEEP 1536:NOlqxMaifvi9eUVkA6GCAtzPROxn+smd:NO5aTeUR6GCAtzPROxn+
TLSH
T143437C31BAE1C436E0A6267054B4D7D18E2F380297B5919F7BCC167DAFA16D04E783B2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-21_f361edfc041b5727a2f9a31bb494abdc_amadey_elex_karagany_redline-stealer_rhadamanthys_smoke-loader

2026-08-21_f361edfc041b5727a2f9a31bb494abdc_amadey_elex_karagany_redline-stealer_rhadamanthys_smoke-loader

.exe 54KB

IMPHASH ffb362155db165b385240e18fc2a5dcd
SHA256 7f42d177f7f2f15296d0587ceb8dd1817d19870a3a8022824cc7e686db8c5cd3
MD5 f361edfc041b5727a2f9a31bb494abdc
SHA1 fdc83da20994f42106a4dde8a297975c445bab36
SHA512 75e33b006de2ecddb05f9d85e12b97de14186a30f9b910c4bb6889ca9009fb5f4cbe55e6b7646116b7d0cf0e77dd4963344305e27644da4748cbc90050697b83
SSDEEP 1536:NOlqxMaifvi9eUVkA6GCAtzPROxn+smd:NO5aTeUR6GCAtzPROxn+
TLSH
T143437C31BAE1C436E0A6267054B4D7D18E2F380297B5919F7BCC167DAFA16D04E783B2
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

1

Major OS version

5

Entry point

8331

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths