2026-08-27_5af0b162ca6a2c25b9e2bbd56031225b_amadey_elex_redline-stealer_smoke-loader_stop

General

Target
2026-08-27_5af0b162ca6a2c25b9e2bbd56031225b_amadey_elex_redline-stealer_smoke-loader_stop
Size 113KB
Sample260827-vmfcaaxxbv
SHA256 fa6809cbd1216ba12cbbcf911c129100485871fcb90c4d9ba3f1b8883ca889f7
MD5 5af0b162ca6a2c25b9e2bbd56031225b
SHA1 7b3fa65f177bc9691fba0dd66a86eabe82a8b78b
SHA512 a166108865f7f8612d0f934fe9c77ffa5ac4b0430a4e27f1e66471d4fa76524eef4e7222c60a0ec2481c9246cf036f31b44a5e5ccf0710fcead829081a57a0c8
SSDEEP 1536:N9O15ew8Ph+i+QuJav8HqFXnJRLLBtreSB1/ytcUGOloMcP/B258/:N9ODUt+ravLXJRXe2/yt7BlY258/
TLSH
T1F3B36C34FE755035C6CFD1312E71D398A376D80126A411DE564993E87EB86E86F382B2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-27_5af0b162ca6a2c25b9e2bbd56031225b_amadey_elex_redline-stealer_smoke-loader_stop

2026-08-27_5af0b162ca6a2c25b9e2bbd56031225b_amadey_elex_redline-stealer_smoke-loader_stop

.exe 113KB

IMPHASH 2e80c00d68efcf6d11ca6cbbc73bd947
SHA256 fa6809cbd1216ba12cbbcf911c129100485871fcb90c4d9ba3f1b8883ca889f7
MD5 5af0b162ca6a2c25b9e2bbd56031225b
SHA1 7b3fa65f177bc9691fba0dd66a86eabe82a8b78b
SHA512 a166108865f7f8612d0f934fe9c77ffa5ac4b0430a4e27f1e66471d4fa76524eef4e7222c60a0ec2481c9246cf036f31b44a5e5ccf0710fcead829081a57a0c8
SSDEEP 1536:N9O15ew8Ph+i+QuJav8HqFXnJRLLBtreSB1/ytcUGOloMcP/B258/:N9ODUt+ravLXJRXe2/yt7BlY258/
TLSH
T1F3B36C34FE755035C6CFD1312E71D398A376D80126A411DE564993E87EB86E86F382B2
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

5

Entry point

76586

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths