2026-08-22_73db567bae2d2dbe90e276535001b89d_amadey_elex_karagany_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee_wapomi

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-22_73db567bae2d2dbe90e276535001b89d_amadey_elex_karagany_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee_wapomi
Size 104KB
Sample260823-hbbthayvex
SHA256 de763e80d597c590e8b6af93d2c0b41d9a929d42008ed78f75e1426e74635ca1
MD5 73db567bae2d2dbe90e276535001b89d
SHA1 b70d0736b1cd9f548a34084184e533e60a47982e
SHA512 cf5fe159230ea8bda9b03122655cd5b3454b13e5e347a45595e3db13de4a78e9031871873838fef8adcf7e7c2f9ee2d3a2ee4303e76ea256c954126961f3e6de
SSDEEP 1536:3C/uy9/ra8NNqQbYOQ2RSL08njwq2aPln8ffBGCq2iW7z:yJ9/rRNgOQ2EArZaPlncZGCH
TLSH
T147A37D17B2F8D071D07213F448A59EAA6A7E78112E7049CB27EC17BA1E703C0697979F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-22_73db567bae2d2dbe90e276535001b89d_amadey_elex_karagany_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee_wapomi

File Explorer

2026-08-22_73db567bae2d2dbe90e276535001b89d_amadey_elex_karagany_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee_wapomi

.exe 104KB

2026-08-22_73db567bae2d2dbe90e276535001b89d_amadey_elex_karagany_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee_wapomi

IMPHASH 25f235a387733aaa5562461b484122ac
SHA256 de763e80d597c590e8b6af93d2c0b41d9a929d42008ed78f75e1426e74635ca1
MD5 73db567bae2d2dbe90e276535001b89d
SHA1 b70d0736b1cd9f548a34084184e533e60a47982e
SHA512 cf5fe159230ea8bda9b03122655cd5b3454b13e5e347a45595e3db13de4a78e9031871873838fef8adcf7e7c2f9ee2d3a2ee4303e76ea256c954126961f3e6de
SSDEEP 1536:3C/uy9/ra8NNqQbYOQ2RSL08njwq2aPln8ffBGCq2iW7z:yJ9/rRNgOQ2EArZaPlncZGCH
TLSH
T147A37D17B2F8D071D07213F448A59EAA6A7E78112E7049CB27EC17BA1E703C0697979F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

114688

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\JEGX_DEV\Dev\CPU_Burner\CpuBurn_src\Release\CpuBurner.pdb

kernel32

GetCurrentThreadId SetThreadAffinityMask CloseHandle ResumeThread CreateThread CreateFileW HeapSize IsProcessorFeaturePresent HeapReAlloc GetStringTypeW LCMapStringW WaitForMultipleObjects GetCurrentThread SetStdHandle RtlUnwind LoadLibraryW RaiseException HeapAlloc HeapFree IsValidCodePage GetOEMCP GetACP GetCPInfo LeaveCriticalSection GetSystemInfo ExitThread Sleep MultiByteToWideChar TerminateThread EnterCriticalSection GetConsoleMode WriteConsoleW WaitForSingleObject GetCommandLineA HeapSetInformation GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent DecodePointer EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetModuleHandleW SetLastError GetLastError InterlockedDecrement GetProcAddress ExitProcess WriteFile GetStdHandle GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP FlushFileBuffers

user32

DialogBoxParamW LoadIconA SetClassLongW EndDialog SendDlgItemMessageW SetWindowTextA EnableWindow GetDlgItemTextA SetDlgItemTextA ClientToScreen SetCursor RemovePropW SetCapture GetParent LoadCursorW PtInRect SetPropW GetCapture InvalidateRect GetWindowLongW GetDlgItem SetWindowLongW ReleaseCapture SendMessageW GetPropW CallWindowProcW GetWindowRect

gdi32

CreateFontIndirectW DeleteObject GetObjectW SetTextColor

shell32

ShellExecuteA

comctl32

ord17

Name

.text

Size

48KB

Virtual Size

48KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

13KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

15KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

,O��u�

Size

16KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-22_73db567bae2d2dbe90e276535001b89d_amadey_elex_karagany_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee_wapomi

kernel32

user32

gdi32

shell32

comctl32

generic