General
- Target 2026-07-07_ac8e0fddba29979c9639c87e21efd28f_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 1.4MB
- Sample260707-s72d5shv8p
- SHA256 4d2704c7ee2255a42146982e2c10c50356a8dcf583ecd08a5b3d97772147a075
- MD5 ac8e0fddba29979c9639c87e21efd28f
- SHA1 1c5cf21e338cb8819656fdc6a2da9a819bf43904
- SHA512 3098e353f91ff08e600a5330bdb5622ae959400414a9acf5b056e40c5b98e00307710fc9dae5cd28df180a8143153f6a75abba22a70782b17ba24bb963725e8d
- SSDEEP 12288:KsyYzfZba1TLkSGPTy3GyS0VTBG//sop9bw/W1wR/kjy6FtgQAdJsg0HjoMWI:VB21sxPTyXnQ/tbw/2Mkjy6Fr7g0oI
- TLSH T1AB65023532D1D0B3D47A147098A5A7A29B7E2D621B7181EF77F0273D8E303E085BA796
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-07_ac8e0fddba29979c9639c87e21efd28f_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_ac8e0fddba29979c9639c87e21efd28f_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 1.4MB
- SHA256 4d2704c7ee2255a42146982e2c10c50356a8dcf583ecd08a5b3d97772147a075
- MD5 ac8e0fddba29979c9639c87e21efd28f
- SHA1 1c5cf21e338cb8819656fdc6a2da9a819bf43904
- SHA512 3098e353f91ff08e600a5330bdb5622ae959400414a9acf5b056e40c5b98e00307710fc9dae5cd28df180a8143153f6a75abba22a70782b17ba24bb963725e8d
- SSDEEP 12288:KsyYzfZba1TLkSGPTy3GyS0VTBG//sop9bw/W1wR/kjy6FtgQAdJsg0HjoMWI:VB21sxPTyXnQ/tbw/2Mkjy6Fr7g0oI
- TLSH T1AB65023532D1D0B3D47A147098A5A7A29B7E2D621B7181EF77F0273D8E303E085BA796
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1