2026-06-27_b44c3fca99651dbc7d0887d946579726_amadey_elex_rhadamanthys_smoke-loader_stealc_stop

General

Target
2026-06-27_b44c3fca99651dbc7d0887d946579726_amadey_elex_rhadamanthys_smoke-loader_stealc_stop
Size 13.3MB
Sample260629-d9dnjadw3m
SHA256 66155e1b19ae396c0119299e797c44bda4786bacb9a0f8c440179600c7edb760
MD5 b44c3fca99651dbc7d0887d946579726
SHA1 5fd794dbb353df562539207423a55c2626532bee
SHA512 e97f688bf63663f906b0e950007debd219c37eb0d4f5facef65e5a260a4a998ad3b635d38d777d58e4a8ad14dcf9f4a6149ff2c0c127b74456561cf2d6523dc0
SSDEEP 98304:YIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIP:
TLSH
T187E68E8046D1C0ABCB5543F42B3B06876FE5BDBA67A583BE351F4C866EC13851C276E8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-06-27_b44c3fca99651dbc7d0887d946579726_amadey_elex_rhadamanthys_smoke-loader_stealc_stop

File Explorer

2026-06-27_b44c3fca99651dbc7d0887d946579726_amadey_elex_rhadamanthys_smoke-loader_stealc_stop

.exe 13.3MB

2026-06-27_b44c3fca99651dbc7d0887d946579726_amadey_elex_rhadamanthys_smoke-loader_stealc_stop

IMPHASH f9495905953586e6497ea134e67ea38f
SHA256 66155e1b19ae396c0119299e797c44bda4786bacb9a0f8c440179600c7edb760
MD5 b44c3fca99651dbc7d0887d946579726
SHA1 5fd794dbb353df562539207423a55c2626532bee
SHA512 e97f688bf63663f906b0e950007debd219c37eb0d4f5facef65e5a260a4a998ad3b635d38d777d58e4a8ad14dcf9f4a6149ff2c0c127b74456561cf2d6523dc0
SSDEEP 98304:YIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIP:
TLSH
T187E68E8046D1C0ABCB5543F42B3B06876FE5BDBA67A583BE351F4C866EC13851C276E8
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

4869

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WritePrivateProfileStructA SetLocalTime WriteTapemark GetNamedPipeHandleStateA _lcreat SetTapeParameters GetTickCount FindNextVolumeMountPointA ActivateActCtx FindResourceExA GlobalAlloc LoadLibraryW TerminateThread GetPrivateProfileStructW GetSystemPowerStatus SetSystemTimeAdjustment SetConsoleMode GetBinaryTypeA CompareStringW lstrlenW SetPriorityClass GetPrivateProfileIntW SetCurrentDirectoryA GetTapeStatus LoadLibraryA CreateSemaphoreW GetConsoleScreenBufferInfo LocalAlloc BuildCommDCBAndTimeoutsW GetProfileStringA SetFileApisToANSI AddAtomA GetTapeParameters ContinueDebugEvent VirtualProtect CloseHandle GetSystemTime lstrcpyW DeactivateActCtx GetThreadContext HeapAlloc GetStartupInfoW DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree VirtualAlloc HeapReAlloc HeapCreate GetModuleHandleW Sleep GetProcAddress ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetUnhandledExceptionFilter GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId GetLastError InterlockedDecrement QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize GetLocaleInfoA WideCharToMultiByte GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW GetModuleHandleA

user32

GetAncestor

gdi32

GetBitmapDimensionEx

Sharing

General

Malware Config

Signatures

File Explorer

2026-06-27_b44c3fca99651dbc7d0887d946579726_amadey_elex_rhadamanthys_smoke-loader_stealc_stop

kernel32

user32

gdi32

generic