2026-09-29_2c20bc2d5bdad6d4f715d20884351c66_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-29_2c20bc2d5bdad6d4f715d20884351c66_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
Size 45KB
Sample260930-2mtm8sbh99
SHA256 53ef17d59b9a3226b740e3eb221264c1be9685f599594cff87fb2f38a6c541b1
MD5 2c20bc2d5bdad6d4f715d20884351c66
SHA1 2c7c94365becd71305035cdbdd92b84ccde4537f
SHA512 3a51388ab7b4b4399f35e347f7ad1c2e0e846abd10b3ad7497f4f0b882285c3a87189b32ed39f1171025dd12afd454bb62a489024b120e6624a61b73c25beae8
SSDEEP 768:qhLoC/swZkA5gZH7bPW+6ZkFgWH6WjnNQq:qpo2lgZH/ngky2hQq
TLSH
T158237C1279A0C073C82198B10825CA916F7FA9255BA191C77F9C567EBF323C19B3D39E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-29_2c20bc2d5bdad6d4f715d20884351c66_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop

File Explorer

2026-09-29_2c20bc2d5bdad6d4f715d20884351c66_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop

.exe 45KB

2026-09-29_2c20bc2d5bdad6d4f715d20884351c66_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop

IMPHASH f1e52a7b5cfca7ba86fb4ea028bf7c46
SHA256 53ef17d59b9a3226b740e3eb221264c1be9685f599594cff87fb2f38a6c541b1
MD5 2c20bc2d5bdad6d4f715d20884351c66
SHA1 2c7c94365becd71305035cdbdd92b84ccde4537f
SHA512 3a51388ab7b4b4399f35e347f7ad1c2e0e846abd10b3ad7497f4f0b882285c3a87189b32ed39f1171025dd12afd454bb62a489024b120e6624a61b73c25beae8
SSDEEP 768:qhLoC/swZkA5gZH7bPW+6ZkFgWH6WjnNQq:qpo2lgZH/ngky2hQq
TLSH
T158237C1279A0C073C82198B10825CA916F7FA9255BA191C77F9C567EBF323C19B3D39E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

7986

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetStringTypeW GetStringTypeA LCMapStringW MultiByteToWideChar LCMapStringA GetLocaleInfoA LoadLibraryA GetProcAddress ExpandEnvironmentStringsA UnmapViewOfFile OpenFileMappingA MapViewOfFile CloseHandle lstrlenA lstrcpyA lstrcatA MulDiv GetModuleFileNameA GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetLastError GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapAlloc LeaveCriticalSection EnterCriticalSection InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage VirtualAlloc HeapReAlloc RtlUnwind HeapSize

user32

CreateMenu AppendMenuA GetSystemMetrics CreateWindowExA GetMessageA TranslateMessage DispatchMessageA DestroyMenu UnregisterClassA DestroyWindow PostQuitMessage DefWindowProcA BeginPaint wsprintfA EndPaint RegisterClassExA MessageBeep KillTimer SetForegroundWindow SystemParametersInfoA MonitorFromWindow GetMonitorInfoA CopyRect IsZoomed SendMessageA ShowWindow IsIconic GetWindowRect EqualRect SetWindowPos IsWindow IsWindowVisible GetClientRect InvalidateRect LoadCursorA FindWindowExA SetTimer

gdi32

SelectObject GetStockObject GetTextExtentPoint32A TextOutA

advapi32

RegOpenKeyExA RegQueryValueExA RegCloseKey

cwmulti

Cwm_OnHelpCallBack

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-29_2c20bc2d5bdad6d4f715d20884351c66_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop

kernel32

user32

gdi32

advapi32

cwmulti

generic