General
- Target 2026-06-02_0d0c42ae831bde029a635113693b0243_amadey_elex_maze_rhadamanthys_smoke-loader_stealc_stop
- Size 155KB
- Sample260602-nedp6acy4n
- SHA256 8ba5bdd8861af4a5ab99ada3b4d17678e0661d905f8eb6cde278d5fab7f04c7a
- MD5 0d0c42ae831bde029a635113693b0243
- SHA1 fe7ac5bc15385d22df5a195165d312e4ef782ec1
- SHA512 719e4e1f0b8412b42e8f9574e3b8f749d79b8c940d6c893461c84405f7369974edf9aa175d4c256fe228653c021049e901873db30b5f03f2fd98b2b2dc791029
- SSDEEP 1536:2gPt0KClIhV0u7XnUNORgvshmnXxc5B5bbagFwHh+zX5q2AVykPzum6CFIeFCqm3:dhV0rNOUU/0GoRyGrC+hMPz+TLdABHX
- TLSH T112F39D0636D0C071EAE7023209B89B66597DFD714B708DD7B7984B0E6DB06C0AB36B67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-02_0d0c42ae831bde029a635113693b0243_amadey_elex_maze_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-02_0d0c42ae831bde029a635113693b0243_amadey_elex_maze_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win11-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-02_0d0c42ae831bde029a635113693b0243_amadey_elex_maze_rhadamanthys_smoke-loader_stealc_stop
- Size 155KB
- SHA256 8ba5bdd8861af4a5ab99ada3b4d17678e0661d905f8eb6cde278d5fab7f04c7a
- MD5 0d0c42ae831bde029a635113693b0243
- SHA1 fe7ac5bc15385d22df5a195165d312e4ef782ec1
- SHA512 719e4e1f0b8412b42e8f9574e3b8f749d79b8c940d6c893461c84405f7369974edf9aa175d4c256fe228653c021049e901873db30b5f03f2fd98b2b2dc791029
- SSDEEP 1536:2gPt0KClIhV0u7XnUNORgvshmnXxc5B5bbagFwHh+zX5q2AVykPzum6CFIeFCqm3:dhV0rNOUU/0GoRyGrC+hMPz+TLdABHX
- TLSH T112F39D0636D0C071EAE7023209B89B66597DFD714B708DD7B7984B0E6DB06C0AB36B67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10- Custom signature
Detects executables containing SQL queries to confidential data stores. Observed in infostealers
Downloads MZ/PE file
Executes dropped EXE
Checks whether UAC is enabled