2026-09-10_ddd4a0c4f20ec9768192e5741c464a86_amadey_elex_redline-stealer_smoke-loader_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-10_ddd4a0c4f20ec9768192e5741c464a86_amadey_elex_redline-stealer_smoke-loader_stop
Size 1.4MB
Sample260910-lsavbat1hy
SHA256 7b29e38e1f3b9e6acaa5c137c06ebb0e726b9c46470fee340ffda7733ce1f281
MD5 ddd4a0c4f20ec9768192e5741c464a86
SHA1 03ea3ace5011dfdcf8c59321281c0db5f2a497a2
SHA512 8331d79f0f65da40da9d764fe0f15090a98688d6540c3d5ffc335be1999d1d1a2d6d8ddcc4fd15aa190a0742530ad3cd708eb892c679e08960fdb3da539c6086
SSDEEP 12288:+vy2bxw/cmpmhnlcSkfLoJlARaGdf1IrOrNhyRfLz707YH7lk9wl225CnPkKb5rQ:+FQchQSkjovoKFLgYHJWwl24C15rDY
TLSH
T18865011133E1C872D627247A4DA9D37965BAFD304BA442C7BB801B7E9E716D14F3838A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-10_ddd4a0c4f20ec9768192e5741c464a86_amadey_elex_redline-stealer_smoke-loader_stop

File Explorer

2026-09-10_ddd4a0c4f20ec9768192e5741c464a86_amadey_elex_redline-stealer_smoke-loader_stop

.exe 1.4MB

2026-09-10_ddd4a0c4f20ec9768192e5741c464a86_amadey_elex_redline-stealer_smoke-loader_stop

IMPHASH 5cce9326c999417aa97670acc4cb6c19
SHA256 7b29e38e1f3b9e6acaa5c137c06ebb0e726b9c46470fee340ffda7733ce1f281
MD5 ddd4a0c4f20ec9768192e5741c464a86
SHA1 03ea3ace5011dfdcf8c59321281c0db5f2a497a2
SHA512 8331d79f0f65da40da9d764fe0f15090a98688d6540c3d5ffc335be1999d1d1a2d6d8ddcc4fd15aa190a0742530ad3cd708eb892c679e08960fdb3da539c6086
SSDEEP 12288:+vy2bxw/cmpmhnlcSkfLoJlARaGdf1IrOrNhyRfLz707YH7lk9wl225CnPkKb5rQ:+FQchQSkjovoKFLgYHJWwl24C15rDY
TLSH
T18865011133E1C872D627247A4DA9D37965BAFD304BA442C7BB801B7E9E716D14F3838A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

66037

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

c:\Build\PSIKey\BRANCH_ACTIVATOR_3_3_0\Parts\bin\ReleaseAntiCrack\PSIService_2.pdb

rpcrt4

RpcServerListen RpcServerRegisterIf RpcServerUseProtseqEpA NdrServerCall2 RpcMgmtStopServerListening

kernel32

VirtualAlloc HeapReAlloc HeapSize Sleep ExitProcess GetACP IsValidCodePage LCMapStringA LCMapStringW HeapCreate VirtualFree GetStdHandle FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW RaiseException SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetStringTypeA GetStringTypeW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale GetLocaleInfoW GetConsoleCP GetConsoleMode SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW RtlUnwind GetCommandLineA HeapAlloc HeapFree IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess GetOEMCP GetCPInfo GetLocaleInfoA GlobalFlags CreateFileA GetCurrentProcess FlushFileBuffers SetFilePointer WriteFile ReadFile GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom lstrcmpW lstrcmpA GlobalGetAtomNameA InterlockedIncrement GetModuleHandleW CompareStringA GetCurrentThreadId CloseHandle FormatMessageA MultiByteToWideChar lstrlenA GetCurrentProcessId WideCharToMultiByte FindResourceA LoadResource LockResource SizeofResource InterlockedDecrement TlsFree GlobalFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalAlloc GlobalHandle GlobalUnlock GlobalReAlloc GlobalLock EnterCriticalSection TlsGetValue LeaveCriticalSection GetLastError SetLastError FreeLibrary LoadLibraryA GetSystemInfo GetVersionExA LocalFree LocalAlloc GetModuleHandleA GetProcAddress FindFirstFileA SetEvent WaitForSingleObject CreateThread CreateEventA lstrcmpiA GetModuleFileNameA GetEnvironmentStringsW

user32

PostQuitMessage GrayStringA DrawTextExA DrawTextA TabbedTextOutA DestroyMenu ClientToScreen SetWindowTextA RegisterWindowMessageA LoadIconA WinHelpA GetCapture GetClassLongA GetClassNameA GetPropA RemovePropA IsWindow GetForegroundWindow GetDlgItem GetTopWindow DestroyWindow GetMessageTime GetMessagePos MapWindowPoints SetMenu UnhookWindowsHookEx MessageBoxA EnableWindow IsWindowEnabled SetForegroundWindow GetClientRect PostMessageA CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA AdjustWindowRectEx CopyRect GetDlgCtrlID DefWindowProcA CallWindowProcA PtInRect GetMenu SetWindowLongA SetWindowPos SystemParametersInfoA IsIconic GetWindowPlacement GetWindowRect SetPropA GetLastActivePopup GetWindowLongA GetParent SendMessageA GetWindowThreadProcessId GetSubMenu GetMenuItemCount GetMenuItemID GetMenuState GetWindow SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapA GetFocus ModifyMenuA EnableMenuItem CheckMenuItem GetWindowTextA LoadCursorA GetSystemMetrics GetDC ReleaseDC GetSysColor GetSysColorBrush SetWindowsHookExA CallNextHookEx DispatchMessageA GetKeyState PeekMessageA ValidateRect

gdi32

GetStockObject SetViewportExtEx DeleteDC ScaleWindowExtEx SetWindowExtEx GetClipBox CreateBitmap GetDeviceCaps OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape TextOutA RectVisible PtVisible SetMapMode RestoreDC SaveDC ExtTextOutA DeleteObject SetBkColor SetTextColor ScaleViewportExtEx

winspool.drv

DocumentPropertiesA OpenPrinterA ClosePrinter

advapi32

ReportEventA DeregisterEventSource RegSetValueExA RegCreateKeyExA RegCloseKey QueryServiceConfigA UnlockServiceDatabase LockServiceDatabase DeleteService StartServiceA CreateServiceA ControlService CloseServiceHandle OpenServiceA OpenSCManagerA SetServiceStatus RegisterServiceCtrlHandlerA StartServiceCtrlDispatcherA RegisterEventSourceA

oleaut32

VariantClear VariantChangeType VariantInit

oleacc

LresultFromObject CreateStdAccessibleObject

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-10_ddd4a0c4f20ec9768192e5741c464a86_amadey_elex_redline-stealer_smoke-loader_stop

rpcrt4

kernel32

user32

gdi32

winspool.drv

advapi32

oleaut32

oleacc

generic