2026-08-21_cbcb7e28f3244e0fabf5774f93b7af48_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-21_cbcb7e28f3244e0fabf5774f93b7af48_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee
Size 10.7MB
Sample260822-getcaav1d1
SHA256 5726c2ecb9e8c013e44b3a8893dd4f4e2cedb95c21129fd711b6f6704f888f54
MD5 cbcb7e28f3244e0fabf5774f93b7af48
SHA1 b434d02fd2b43abc72c0161be8366ab4cd92a8f5
SHA512 74797dc63e39e51afc75c2f87f07a3deb9badf9b690bf0d4887d4b4ffcbdf04d4aaec551587c9e8322f5cca6e367e49f6eba36f503b5deb7a904fc228fe09e5c
SSDEEP 98304:WFaxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx:W
TLSH
T12AB66D90E7F25981E667853B8A527ED8D63FFC52F9E2D24F23045A7F2C70252C942326
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-21_cbcb7e28f3244e0fabf5774f93b7af48_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee

File Explorer

2026-08-21_cbcb7e28f3244e0fabf5774f93b7af48_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee

.exe 10.7MB

2026-08-21_cbcb7e28f3244e0fabf5774f93b7af48_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee

IMPHASH af5b51cd81208d846c1363af30da3791
SHA256 5726c2ecb9e8c013e44b3a8893dd4f4e2cedb95c21129fd711b6f6704f888f54
MD5 cbcb7e28f3244e0fabf5774f93b7af48
SHA1 b434d02fd2b43abc72c0161be8366ab4cd92a8f5
SHA512 74797dc63e39e51afc75c2f87f07a3deb9badf9b690bf0d4887d4b4ffcbdf04d4aaec551587c9e8322f5cca6e367e49f6eba36f503b5deb7a904fc228fe09e5c
SSDEEP 98304:WFaxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx:W
TLSH
T12AB66D90E7F25981E667853B8A527ED8D63FFC52F9E2D24F23045A7F2C70252C942326
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

9217

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesLengthW SetEndOfFile FindResourceW CreateDirectoryW WriteConsoleInputA GetModuleHandleW VirtualFree LoadLibraryW ReplaceFileW GetModuleFileNameW GlobalUnlock GetLastError SetLastError GetProcAddress AttachConsole IsBadStringPtrW LocalAlloc GlobalGetAtomNameW EnumResourceTypesW GetOEMCP CancelIo OpenFileMappingW GetWindowsDirectoryW CreateFileW WriteConsoleW CloseHandle HeapSize FlushFileBuffers GetConsoleMode GetConsoleCP RemoveVectoredExceptionHandler FindResourceA CreateFileA OpenMutexA GetDateFormatW GetStringTypeW MultiByteToWideChar LCMapStringW HeapFree HeapReAlloc GetCommandLineA HeapSetInformation GetStartupInfoW IsProcessorFeaturePresent HeapCreate HeapAlloc SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection SetFilePointer UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer DecodePointer TerminateProcess GetCurrentProcess EnterCriticalSection LeaveCriticalSection ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP IsValidCodePage Sleep SetStdHandle RtlUnwind RaiseException

user32

InsertMenuItemW GetKeyboardLayoutNameW GetCaretPos SetMessageExtraInfo CharUpperBuffW DdeKeepStringHandle GetClassInfoW

gdi32

GetCharWidthW

advapi32

BackupEventLogW GetLengthSid

shell32

FindExecutableA

ole32

CoRevokeClassObject CoMarshalHresult

winhttp

WinHttpWriteData

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-21_cbcb7e28f3244e0fabf5774f93b7af48_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee

kernel32

user32

gdi32

advapi32

shell32

ole32

winhttp

generic