2026-07-12_9cdd74988dfb8be43e2bc54f448df8bd_amadey_elex_floxif_rhadamanthys_smoke-loader_stealc_stop_tofsee

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-12_9cdd74988dfb8be43e2bc54f448df8bd_amadey_elex_floxif_rhadamanthys_smoke-loader_stealc_stop_tofsee
Size 365KB
Sample260712-tzf9nsfs2x
SHA256 6bbd9f58e67baf9dfb15b4eb455729442763c6017b004c378bc8ede6fb89f9aa
MD5 9cdd74988dfb8be43e2bc54f448df8bd
SHA1 fd3a586e299d0c3f5d95fa88b9b1351b6d2f7bb2
SHA512 8952a2871073f63c9406d854a82cda481639ba35fb056946b41edfbf17232bec89166f67c94639923b2f3875b223bde56373b273fdbf60adb80963d82595134f
SSDEEP 6144:bO7/eS3XSlKN3WGTNzf8P5LyBV+UdvrEFp7hKcn:bO7/XXSKNHThUP5LyBjvrEH7Jn
TLSH
T15184298420B0B377F136A4373818F755D6E498A5F728D02BE652FDFA1A767908A043B7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-12_9cdd74988dfb8be43e2bc54f448df8bd_amadey_elex_floxif_rhadamanthys_smoke-loader_stealc_stop_tofsee

File Explorer

2026-07-12_9cdd74988dfb8be43e2bc54f448df8bd_amadey_elex_floxif_rhadamanthys_smoke-loader_stealc_stop_tofsee

.exe 365KB

2026-07-12_9cdd74988dfb8be43e2bc54f448df8bd_amadey_elex_floxif_rhadamanthys_smoke-loader_stealc_stop_tofsee

IMPHASH f3173778f088ce2b56b8257bfe393419
SHA256 6bbd9f58e67baf9dfb15b4eb455729442763c6017b004c378bc8ede6fb89f9aa
MD5 9cdd74988dfb8be43e2bc54f448df8bd
SHA1 fd3a586e299d0c3f5d95fa88b9b1351b6d2f7bb2
SHA512 8952a2871073f63c9406d854a82cda481639ba35fb056946b41edfbf17232bec89166f67c94639923b2f3875b223bde56373b273fdbf60adb80963d82595134f
SSDEEP 6144:bO7/eS3XSlKN3WGTNzf8P5LyBV+UdvrEFp7hKcn:bO7/XXSKNHThUP5LyBjvrEH7Jn
TLSH
T15184298420B0B377F136A4373818F755D6E498A5F728D02BE652FDFA1A767908A043B7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

69452

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

d:\Projects\WinRAR\SFX\build\sfxzip32\Release\sfxzip.pdb

comctl32

InitCommonControlsEx

shlwapi

SHAutoComplete

kernel32

CreateDirectoryW FindClose FindNextFileW FindFirstFileW GetVersionExW GetCurrentDirectoryW GetFullPathNameW GetModuleFileNameW FindResourceW GetModuleHandleW FreeLibrary GetProcAddress LoadLibraryW GetCurrentProcessId GetLocaleInfoW GetNumberFormatW SetEnvironmentVariableW ExpandEnvironmentStringsW WaitForSingleObject GetDateFormatW GetTimeFormatW FileTimeToSystemTime FileTimeToLocalFileTime GetExitCodeProcess GetTempPathW MoveFileExW UnmapViewOfFile Sleep MapViewOfFile GetCommandLineW CreateFileMappingW GetTickCount OpenFileMappingW SystemTimeToFileTime TzSpecificLocalTimeToSystemTime LocalFileTimeToFileTime WideCharToMultiByte MultiByteToWideChar CompareStringW IsDBCSLeadByte GetCPInfo GlobalAlloc SetCurrentDirectoryW WriteConsoleW DeleteFileW WriteConsoleA SetStdHandle GetLocaleInfoA GetStringTypeW GetStringTypeA LoadLibraryA GetConsoleMode GetConsoleCP InitializeCriticalSectionAndSpinCount QueryPerformanceCounter SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA GetModuleHandleA LCMapStringW LCMapStringA IsValidCodePage GetOEMCP GetACP HeapSize GetModuleFileNameA ExitProcess IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess TerminateProcess InterlockedDecrement GetCurrentThreadId InterlockedIncrement TlsFree TlsSetValue TlsAlloc TlsGetValue VirtualAlloc EnterCriticalSection LeaveCriticalSection DeleteCriticalSection VirtualFree MoveFileW SetFileAttributesW GetFileAttributesW FlushFileBuffers SetFileTime ReadFile GetFileType SetEndOfFile SetFilePointer GetStdHandle CloseHandle WriteFile CreateFileW SetLastError GetLastError CreateFileA GetConsoleOutputCP HeapCreate GetStartupInfoA GetCommandLineA GetSystemTimeAsFileTime HeapAlloc HeapReAlloc RaiseException RtlUnwind HeapFree

user32

EnableWindow GetDlgItem LoadBitmapW ShowWindow GetDC ReleaseDC FindWindowExW GetParent MapWindowPoints CreateWindowExW UpdateWindow LoadCursorW RegisterClassExW DefWindowProcW DestroyWindow CopyRect IsWindow CharUpperW OemToCharBuffA LoadIconW PostMessageW GetSysColor SetForegroundWindow MessageBoxW WaitForInputIdle IsWindowVisible DialogBoxParamW DestroyIcon SetFocus GetClassNameW SendDlgItemMessageW EndDialog GetDlgItemTextW SetDlgItemTextW wvsprintfW SendMessageW PeekMessageW GetMessageW TranslateMessage DispatchMessageW LoadStringW GetWindowRect GetClientRect SetWindowPos GetWindowTextW SetWindowTextW GetSystemMetrics GetWindow GetWindowLongW SetWindowLongW

gdi32

GetDeviceCaps CreateCompatibleDC CreateCompatibleBitmap SelectObject StretchBlt DeleteDC GetObjectW DeleteObject CreateDIBSection

advapi32

RegCloseKey RegOpenKeyExW RegQueryValueExW RegCreateKeyExW RegSetValueExW

shell32

SHGetSpecialFolderLocation SHFileOperationW SHGetFileInfoW SHGetMalloc SHBrowseForFolderW SHGetPathFromIDListW SHChangeNotify ShellExecuteExW

ole32

CreateStreamOnHGlobal CLSIDFromString CoCreateInstance OleInitialize OleUninitialize

oleaut32

VariantInit

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-12_9cdd74988dfb8be43e2bc54f448df8bd_amadey_elex_floxif_rhadamanthys_smoke-loader_stealc_stop_tofsee

comctl32

shlwapi

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

generic