2026-07-06_0df2bda3f92fcad50dc2dccf3579114c_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

General

Target
2026-07-06_0df2bda3f92fcad50dc2dccf3579114c_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
Size 302KB
Sample260706-dxa2wads2p
SHA256 8f7ff6d24f52d292f1e6d5baf279c013c63cf9d5e8cc7bbf803fded3da272249
MD5 0df2bda3f92fcad50dc2dccf3579114c
SHA1 a784eb0a077eddcb46c04e85d66bc098a0385c2a
SHA512 b2aa921ac0a0196e9e48474f62dbe04adae19d42d46de7f83a1c19784581fb1acc9370559b932377d17f47b9587262a50899739d7379bdea7850d3e606f7fa0c
SSDEEP 6144:UDKW1Lgbdl/TBBvjc/gbkCwhkRSz7B8IgEiBBxY:Ch1Lk7/Tnvjcuw6R8pgEiBQ
TLSH
T189649E1075B0CD72C466203F4996CA354A6F28214FAAB597778B27ED5E313E1B2372CB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-06_0df2bda3f92fcad50dc2dccf3579114c_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

File Explorer

2026-07-06_0df2bda3f92fcad50dc2dccf3579114c_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

.exe 302KB

2026-07-06_0df2bda3f92fcad50dc2dccf3579114c_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

IMPHASH bf5a4aa99e5b160f8521cadd6bfe73b8
SHA256 8f7ff6d24f52d292f1e6d5baf279c013c63cf9d5e8cc7bbf803fded3da272249
MD5 0df2bda3f92fcad50dc2dccf3579114c
SHA1 a784eb0a077eddcb46c04e85d66bc098a0385c2a
SHA512 b2aa921ac0a0196e9e48474f62dbe04adae19d42d46de7f83a1c19784581fb1acc9370559b932377d17f47b9587262a50899739d7379bdea7850d3e606f7fa0c
SSDEEP 6144:UDKW1Lgbdl/TBBvjc/gbkCwhkRSz7B8IgEiBBxY:Ch1Lk7/Tnvjcuw6R8pgEiBQ
TLSH
T189649E1075B0CD72C466203F4996CA354A6F28214FAAB597778B27ED5E313E1B2372CB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

52527

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

RaiseException GetLastError MultiByteToWideChar lstrlenA InterlockedDecrement GetProcAddress LoadLibraryA FreeResource SizeofResource LockResource LoadResource FindResourceA GetModuleHandleA Module32Next CloseHandle Module32First CreateToolhelp32Snapshot GetCurrentProcessId SetEndOfFile GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA GetLocaleInfoA HeapFree GetProcessHeap HeapAlloc GetCommandLineA HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc HeapSize TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA WideCharToMultiByte GetConsoleCP GetConsoleMode ReadFile TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId FlushFileBuffers SetFilePointer SetHandleCount GetFileType GetStartupInfoA RtlUnwind FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage CompareStringA CompareStringW SetEnvironmentVariableA WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle CreateFileA

ole32

OleInitialize

oleaut32

SafeArrayCreate SafeArrayAccessData SafeArrayUnaccessData SafeArrayDestroy SafeArrayCreateVector VariantClear VariantInit SysFreeString SysAllocString

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-06_0df2bda3f92fcad50dc2dccf3579114c_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

kernel32

ole32

oleaut32

generic