2026-09-08_ef993d66a2c7373ee8a09e75a7d3f924_amadey_elex_redline-stealer_smoke-loader_stop

General

Target
2026-09-08_ef993d66a2c7373ee8a09e75a7d3f924_amadey_elex_redline-stealer_smoke-loader_stop
Size 113KB
Sample260910-b7739acm5x
SHA256 7642139d9a5ddc283256a9ec5b0b3787ebb50d280f45d027c0af97a5993b4374
MD5 ef993d66a2c7373ee8a09e75a7d3f924
SHA1 11b86ad0bd351006965e2aa3229535579cc9e27a
SHA512 17597e2d169ab7e8072cd90f8fb20171e70ca2a705cfba89a444e5112c090471527bc953c0f708c11e132a1910b70896e3e41a8db7feaf837fa6af17623843d7
SSDEEP 1536:7lFCvV7LCceZL7bewHGrJ84ot9dA41qrHL6m9EAUGOloMcP/B25tx:7lktDYJ54oto41KHLj9EHBlY25
TLSH
T129B38D06AE93417BD35487FD1482D3C3C230BA8900646AFF6243DA5EBFE163962D53B6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-08_ef993d66a2c7373ee8a09e75a7d3f924_amadey_elex_redline-stealer_smoke-loader_stop

2026-09-08_ef993d66a2c7373ee8a09e75a7d3f924_amadey_elex_redline-stealer_smoke-loader_stop

.exe 113KB

IMPHASH 2e80c00d68efcf6d11ca6cbbc73bd947
SHA256 7642139d9a5ddc283256a9ec5b0b3787ebb50d280f45d027c0af97a5993b4374
MD5 ef993d66a2c7373ee8a09e75a7d3f924
SHA1 11b86ad0bd351006965e2aa3229535579cc9e27a
SHA512 17597e2d169ab7e8072cd90f8fb20171e70ca2a705cfba89a444e5112c090471527bc953c0f708c11e132a1910b70896e3e41a8db7feaf837fa6af17623843d7
SSDEEP 1536:7lFCvV7LCceZL7bewHGrJ84ot9dA41qrHL6m9EAUGOloMcP/B25tx:7lktDYJ54oto41KHLj9EHBlY25
TLSH
T129B38D06AE93417BD35487FD1482D3C3C230BA8900646AFF6243DA5EBFE163962D53B6
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

5

Entry point

76586

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths