2025-10-19_cbc5b441842457d33b98b803b779569f_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

General

Target
2025-10-19_cbc5b441842457d33b98b803b779569f_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
Size 231KB
Sample251019-c38pnadn2z
SHA256 82c1d308ab480b4e3b2c4019743d0c3f6426b86d826d9f56abac4148467fd336
MD5 cbc5b441842457d33b98b803b779569f
SHA1 665771b845d5a9938bf718ec7bf97117de802735
SHA512 e611a0d2e4b41f7e5ae8af87badd976fb7d0286c1ad07be92058ac2c6caea35cf79bd3c72c6d989b74cd117a7226b1b4abb3e7f2f1f989aa8f364a4d216799f1
SSDEEP 3072:1gA9y9cke1WlnmZuIVauyawL+nLXtIps53XNGy98iTJWBVxoX:1g+ie1QmZuHjac+jmIXCqJWjx
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2025-10-19_cbc5b441842457d33b98b803b779569f_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

File Explorer

2025-10-19_cbc5b441842457d33b98b803b779569f_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

.exe 231KB

2025-10-19_cbc5b441842457d33b98b803b779569f_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

IMPHASH 5c667dde70ade8c371c745906da4aab5
SHA256 82c1d308ab480b4e3b2c4019743d0c3f6426b86d826d9f56abac4148467fd336
MD5 cbc5b441842457d33b98b803b779569f
SHA1 665771b845d5a9938bf718ec7bf97117de802735
SHA512 e611a0d2e4b41f7e5ae8af87badd976fb7d0286c1ad07be92058ac2c6caea35cf79bd3c72c6d989b74cd117a7226b1b4abb3e7f2f1f989aa8f364a4d216799f1
SSDEEP 3072:1gA9y9cke1WlnmZuIVauyawL+nLXtIps53XNGy98iTJWBVxoX:1g+ie1QmZuHjac+jmIXCqJWjx
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

48619

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCPInfo GlobalAlloc TerminateThread TerminateProcess GetLastError SetLastError GetProcAddress LoadLibraryA AddAtomW AddAtomA GetFileInformationByHandle GetProcessHeap SetEndOfFile GetLocaleInfoW GetModuleHandleA CreateFileA SetStdHandle WriteConsoleW GetConsoleOutputCP WriteConsoleA InitializeCriticalSectionAndSpinCount IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID IsValidCodePage GetOEMCP GetACP HeapSize WideCharToMultiByte InterlockedIncrement InterlockedDecrement InterlockedExchange MultiByteToWideChar Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree HeapAlloc GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapReAlloc GetCommandLineA GetStartupInfoA RtlUnwind RaiseException LCMapStringA LCMapStringW SetHandleCount GetStdHandle GetFileType HeapCreate VirtualFree VirtualAlloc GetModuleHandleW ExitProcess WriteFile GetModuleFileNameA ReadFile GetConsoleCP GetConsoleMode FlushFileBuffers TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId SetFilePointer CloseHandle FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeA GetStringTypeW

user32

GetNextDlgGroupItem LoadMenuIndirectA LoadImageW LoadIconA TranslateMessage LoadAcceleratorsW LoadIconW LoadMenuW LookupIconIdFromDirectoryEx PeekMessageW LoadCursorFromFileW LoadStringW LoadBitmapW RegisterRawInputDevices DispatchMessageA OpenClipboard UpdateWindow LoadKeyboardLayoutA LoadCursorA GetDlgCtrlID GetDialogBaseUnits TranslateAcceleratorA

shell32

DragQueryFileW

Sharing

General

Malware Config

Signatures

File Explorer

2025-10-19_cbc5b441842457d33b98b803b779569f_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

kernel32

user32

shell32

generic