2026-04-13_9bf4695e7a6352b2b1e0ae043a1085ac_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

Sharing

Copy URL Twitter E-mail

General

Target
2026-04-13_9bf4695e7a6352b2b1e0ae043a1085ac_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
Size 288KB
Sample260413-t5pg8scy2n
SHA256 1b03d5d87f8f064b911018c1d10c44e54650462d8e7d5869e538860fb289be45
MD5 9bf4695e7a6352b2b1e0ae043a1085ac
SHA1 99e5768987db5c875e685209d47d4945b51485bf
SHA512 7b9d91031f7cb956b936f3bb4a6d4a99dd23f261d663004c3a3058d0a0f1ab673a9ef8f085922fafceb40434ce511944f7065f1f54253ab6a8394e85d940997d
SSDEEP 3072:if/0u1z9e5WRo/Oyfc2/vF0H7R35mTLa6IO+OYjGPtSXF0I9sEs:if/0utSWRY5SoLIO+OYxFRRs
TLSH
T144548C32B6888361DDF603314B7DF5E4663ABCA5677081AF3188762FD9736A38D26341
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-04-13_9bf4695e7a6352b2b1e0ae043a1085ac_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

File Explorer

2026-04-13_9bf4695e7a6352b2b1e0ae043a1085ac_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

.exe 288KB

2026-04-13_9bf4695e7a6352b2b1e0ae043a1085ac_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

SHA256 1b03d5d87f8f064b911018c1d10c44e54650462d8e7d5869e538860fb289be45
MD5 9bf4695e7a6352b2b1e0ae043a1085ac
SHA1 99e5768987db5c875e685209d47d4945b51485bf
SHA512 7b9d91031f7cb956b936f3bb4a6d4a99dd23f261d663004c3a3058d0a0f1ab673a9ef8f085922fafceb40434ce511944f7065f1f54253ab6a8394e85d940997d
SSDEEP 3072:if/0u1z9e5WRo/Oyfc2/vF0H7R35mTLa6IO+OYjGPtSXF0I9sEs:if/0utSWRY5SoLIO+OYxFRRs
TLSH
T144548C32B6888361DDF603314B7DF5E4663ABCA5677081AF3188762FD9736A38D26341
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5845

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

141KB

Virtual Size

140KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.reloc

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

7KB

Virtual Size

68KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

102KB

Virtual Size

101KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.retplne

Size

3KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-04-13_9bf4695e7a6352b2b1e0ae043a1085ac_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

generic