2026-07-22_5446d4e28b0189d0b0b945ce70564514_amadey_elex_rhadamanthys_smoke-loader_stealc_stop

General

Target
2026-07-22_5446d4e28b0189d0b0b945ce70564514_amadey_elex_rhadamanthys_smoke-loader_stealc_stop
Size 142KB
Sample260722-yc764agj21
SHA256 1b81c9d3f4d455607fb598a73db4c2ac3490ccfe9132cb044b06d17c887e4717
MD5 5446d4e28b0189d0b0b945ce70564514
SHA1 57d337155f065a2aa0bf295a57fdf6cfb1f84c6c
SHA512 86621574103555eb56589a9162f152cd020fa4568ea61399f632f2507c1ecbbe857985d5ffc23e6e0d84a6b0a49aa2794565e833cafdb5f9a0b69b335a07005a
SSDEEP 3072:UQ1rBLjPqdoqhdGRhfRmXlaZ6RGEjuEOzA:15jpqiZ4t6EOz
TLSH
T1AEE3BF11F9C2C473C49A123944A7DF912A7AA4311FA279F73B942BBE5EB03D05B26347
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-22_5446d4e28b0189d0b0b945ce70564514_amadey_elex_rhadamanthys_smoke-loader_stealc_stop

File Explorer

2026-07-22_5446d4e28b0189d0b0b945ce70564514_amadey_elex_rhadamanthys_smoke-loader_stealc_stop

.exe 142KB

2026-07-22_5446d4e28b0189d0b0b945ce70564514_amadey_elex_rhadamanthys_smoke-loader_stealc_stop

IMPHASH a561c005b6f2974469c1946aabff93ba
SHA256 1b81c9d3f4d455607fb598a73db4c2ac3490ccfe9132cb044b06d17c887e4717
MD5 5446d4e28b0189d0b0b945ce70564514
SHA1 57d337155f065a2aa0bf295a57fdf6cfb1f84c6c
SHA512 86621574103555eb56589a9162f152cd020fa4568ea61399f632f2507c1ecbbe857985d5ffc23e6e0d84a6b0a49aa2794565e833cafdb5f9a0b69b335a07005a
SSDEEP 3072:UQ1rBLjPqdoqhdGRhfRmXlaZ6RGEjuEOzA:15jpqiZ4t6EOz
TLSH
T1AEE3BF11F9C2C473C49A123944A7DF912A7AA4311FA279F73B942BBE5EB03D05B26347
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

6407

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetStartupInfoW GlobalUnfix GetLastError GetProcAddress FindVolumeMountPointClose GetLongPathNameA CreateConsoleScreenBuffer GetPrivateProfileStringA LoadLibraryA OpenEventA VirtualLock Module32FirstW GetSystemInfo GetConsoleFontSize GetModuleHandleA CreateToolhelp32Snapshot GetFileAttributesExW CloseHandle GetThreadTimes OpenFileMappingA CreateFileA WriteConsoleW GetConsoleOutputCP WriteConsoleA GetConsoleAliasW GetFileAttributesA GetStringTypeExW MapUserPhysicalPagesScatter GetLocaleInfoW GlobalAlloc GetModuleHandleW WriteConsoleOutputW GetOEMCP GetNativeSystemInfo HeapFree HeapReAlloc HeapAlloc GetCommandLineA GetStartupInfoA HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement Sleep HeapSize ExitProcess SetHandleCount GetStdHandle GetFileType SetFilePointer TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind GetCPInfo GetACP IsValidCodePage SetStdHandle GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW RaiseException GetConsoleCP GetConsoleMode FlushFileBuffers

user32

GetMessageExtraInfo DrawFocusRect SetSysColors LoadMenuW GetNextDlgGroupItem

advapi32

RegConnectRegistryW StartServiceW RegGetKeySecurity RegEnumKeyExA EqualPrefixSid EqualSid RegRestoreKeyA InitiateSystemShutdownA GetCurrentHwProfileW

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-22_5446d4e28b0189d0b0b945ce70564514_amadey_elex_rhadamanthys_smoke-loader_stealc_stop

kernel32

user32

advapi32

generic