2026-04-23_27b0b1c4f50feef88c9d484783e95791_amadey_elex_icedid_njrat_rhadamanthys_smoke-loader_stealc_tofsee

Sharing

Copy URL Twitter E-mail

General

Target
2026-04-23_27b0b1c4f50feef88c9d484783e95791_amadey_elex_icedid_njrat_rhadamanthys_smoke-loader_stealc_tofsee
Size 13.2MB
Sample260423-1eba9aas21
SHA256 49ff4cfc4b050ed0f7a223c22c66f5136b81ead48b9d041b2ac6f74ce3f18eaa
MD5 27b0b1c4f50feef88c9d484783e95791
SHA1 43c796fd970f4fb44cca3a3ae9672c22b92da9d0
SHA512 e59bbfb15c7b48ea406ac73a68758d302935974678ae668bc2c6e6050cc3916b244e08fc5a019d29e6d60bcc98fd9aa76afd79e6a6320a69c1d5807f873f08d2
SSDEEP 6144:gKQXE5cfNCEjNrBRkZzyQi70ySqer5+nDFo:gZOcf0wNEbSPer5+nZo
TLSH
T1A7D6DE0452F50D47DE6AEE70667E0E1FCEEE681B644DE71E10A1F02DE972E21C962732
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-04-23_27b0b1c4f50feef88c9d484783e95791_amadey_elex_icedid_njrat_rhadamanthys_smoke-loader_stealc_tofsee

File Explorer

2026-04-23_27b0b1c4f50feef88c9d484783e95791_amadey_elex_icedid_njrat_rhadamanthys_smoke-loader_stealc_tofsee

.exe 13.2MB

2026-04-23_27b0b1c4f50feef88c9d484783e95791_amadey_elex_icedid_njrat_rhadamanthys_smoke-loader_stealc_tofsee

IMPHASH 2c13b01641edb95de78761affa09fc50
SHA256 49ff4cfc4b050ed0f7a223c22c66f5136b81ead48b9d041b2ac6f74ce3f18eaa
MD5 27b0b1c4f50feef88c9d484783e95791
SHA1 43c796fd970f4fb44cca3a3ae9672c22b92da9d0
SHA512 e59bbfb15c7b48ea406ac73a68758d302935974678ae668bc2c6e6050cc3916b244e08fc5a019d29e6d60bcc98fd9aa76afd79e6a6320a69c1d5807f873f08d2
SSDEEP 6144:gKQXE5cfNCEjNrBRkZzyQi70ySqer5+nDFo:gZOcf0wNEbSPer5+nZo
TLSH
T1A7D6DE0452F50D47DE6AEE70667E0E1FCEEE681B644DE71E10A1F02DE972E21C962732
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

23789

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesLengthW GetNumaProcessorNode MoveFileExA BuildCommDCBAndTimeoutsA SystemTimeToTzSpecificLocalTime InterlockedIncrement InterlockedDecrement SetDefaultCommConfigW GetEnvironmentStringsW AddConsoleAliasW GetModuleHandleW GenerateConsoleCtrlEvent GetNumberFormatA SetFileTime GetConsoleAliasExesW EnumTimeFormatsA GetCommandLineA GetDriveTypeA GetEnvironmentStrings GetPrivateProfileIntA LoadLibraryW TerminateThread FatalAppExitW CopyFileW SetVolumeMountPointA SetConsoleCP SetConsoleCursorPosition GetStartupInfoW CreateMailslotW CreateJobObjectA InterlockedExchange SetThreadLocale EnumCalendarInfoA GetHandleInformation GetLastError GetCurrentDirectoryW SetLastError BackupRead EnumSystemCodePagesW LoadLibraryA GetProcessId InterlockedExchangeAdd LocalAlloc GetFileType RemoveDirectoryW GetProfileStringA FindNextChangeNotification FindAtomA GlobalWire EnumDateFormatsA GetModuleHandleA FreeEnvironmentStringsW FindNextFileW VirtualProtect PeekConsoleInputA GetShortPathNameW OpenSemaphoreW FindAtomW GetWindowsDirectoryW FindFirstVolumeW GetVolumeNameForVolumeMountPointW DeleteFileW CreateFileW SetLocaleInfoA GetCommandLineW FindFirstFileW EnumResourceNamesW GetComputerNameA OpenMutexW ReadFile GetStringTypeW LCMapStringW WriteConsoleW HeapAlloc GetProcAddress ExitProcess DecodePointer DeleteFileA EncodePointer HeapReAlloc HeapSetInformation RaiseException UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapFree IsProcessorFeaturePresent WriteFile GetStdHandle GetModuleFileNameW HeapCreate EnterCriticalSection LeaveCriticalSection SetFilePointer SetHandleCount InitializeCriticalSectionAndSpinCount DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId Sleep HeapSize QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage SetStdHandle FlushFileBuffers RtlUnwind MultiByteToWideChar CloseHandle

user32

GetListBoxInfo CharUpperW

gdi32

GetCharWidthW GetTextFaceW SelectPalette

advapi32

LookupAccountSidW

shell32

DragFinish

ole32

CoGetInstanceFromFile

winhttp

WinHttpSetOption

Sharing

General

Malware Config

Signatures

File Explorer

2026-04-23_27b0b1c4f50feef88c9d484783e95791_amadey_elex_icedid_njrat_rhadamanthys_smoke-loader_stealc_tofsee

kernel32

user32

gdi32

advapi32

shell32

ole32

winhttp

generic