2026-08-23_94e88eb1adf5394186c4d79cd02a38f3_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop

General

Target
2026-08-23_94e88eb1adf5394186c4d79cd02a38f3_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
Size 4.4MB
Sample260824-fjse4sshqa
SHA256 86a332e9bc6c883eef2e7022a48f13f912d54fdee8a9c666682dac84a253424b
MD5 94e88eb1adf5394186c4d79cd02a38f3
SHA1 bb0c217c7abc0b346e520c4c5a514dbdcb61861e
SHA512 bb38144122b20796bd507ad03ad229f81a4218c7b611be1f6f220b53316bb6ee3e9f8dbdc073f16619e8ca04e32d67d8f6b33b01cf8e9422850cafa1237cbb7b
SSDEEP 98304:iQRi8rzyu4absB48jEzr5ufxD7k4eArxz3JAq6v:iQRiiKabU4YEzFux04fxWlv
TLSH
T1AE2633757E80E4BAE7E184BBC5A89F40206FFCD31E8485C6735322AA1D274C4A5EF587
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
2026-08-23_94e88eb1adf5394186c4d79cd02a38f3_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop

File Explorer

2026-08-23_94e88eb1adf5394186c4d79cd02a38f3_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop

.exe 4.4MB

2026-08-23_94e88eb1adf5394186c4d79cd02a38f3_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop

IMPHASH 1c8d9df578fc452582af8996e539153c
SHA256 86a332e9bc6c883eef2e7022a48f13f912d54fdee8a9c666682dac84a253424b
MD5 94e88eb1adf5394186c4d79cd02a38f3
SHA1 bb0c217c7abc0b346e520c4c5a514dbdcb61861e
SHA512 bb38144122b20796bd507ad03ad229f81a4218c7b611be1f6f220b53316bb6ee3e9f8dbdc073f16619e8ca04e32d67d8f6b33b01cf8e9422850cafa1237cbb7b
SSDEEP 98304:iQRi8rzyu4absB48jEzr5ufxD7k4eArxz3JAq6v:iQRiiKabU4YEzFux04fxWlv
TLSH
T1AE2633757E80E4BAE7E184BBC5A89F40206FFCD31E8485C6735322AA1D274C4A5EF587
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

20:50:0c:89:26:84:ef:af:be:e2:f2:e6:56:fd:97:f2:cf:94:d3:9b:17:83:a8:5d:3e:36:3c:ed:35:5f:f6:e7

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

POSTALCODE=10051

Chains

Aug 21, 2026

POSTALCODE=10051

Minor OS version

0

Major OS version

5

Entry point

10084

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\tunapep60\yasiciside\pijenihiv\cahotulayil-hon72 sumibovi54_b.pdb

kernel32

CreateTimerQueue WriteConsoleOutputCharacterW EnumDateFormatsExW _lwrite InterlockedDecrement GetCurrentProcess SetEnvironmentVariableW SetConsoleScreenBufferSize SetVolumeMountPointW GetModuleHandleW EnumCalendarInfoExW IsBadReadPtr GetConsoleAliasesLengthA GetUserDefaultLangID GetEnvironmentStrings GetConsoleCP ReadConsoleInputA GetSystemWindowsDirectoryA WriteConsoleOutputA LeaveCriticalSection GetFileAttributesA GetComputerNameExA lstrcpynW LocalReAlloc GetMailslotInfo ReadFile HeapReAlloc GetTimeZoneInformation lstrlenW GetConsoleOutputCP InterlockedExchange GetLastError ChangeTimerQueueTimer GetProcAddress PeekConsoleInputW BeginUpdateResourceW RemoveDirectoryA ResetEvent GetLocalTime LoadLibraryA OpenMutexA WriteConsoleA GlobalGetAtomNameW SetEnvironmentVariableA GetModuleFileNameA GetOEMCP HeapSetInformation GetConsoleTitleW BuildCommDCBA VirtualProtect SetCalendarInfoA FindFirstVolumeA ReleaseMutex GetVolumeNameForVolumeMountPointW GetCurrentProcessId GetConsoleProcessList CreateFileA GetSystemDefaultLangID SetStdHandle WriteConsoleW UnhandledExceptionFilter SetUnhandledExceptionFilter HeapAlloc Sleep ExitProcess GetCommandLineA GetStartupInfoA RaiseException RtlUnwind WriteFile GetStdHandle TerminateProcess IsDebuggerPresent HeapFree DeleteCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapCreate TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetCPInfo GetACP IsValidCodePage HeapSize GetLocaleInfoA GetConsoleMode FlushFileBuffers LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW SetFilePointer CloseHandle

user32

RealGetWindowClassA

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-23_94e88eb1adf5394186c4d79cd02a38f3_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop

PE Signature issue

kernel32

user32

generic