2026-07-30_5c5cbbb19bcdd69856070782bf86f7ca_amadey_elex_rhadamanthys_smoke-loader_stealc

General

Target
2026-07-30_5c5cbbb19bcdd69856070782bf86f7ca_amadey_elex_rhadamanthys_smoke-loader_stealc
Size 13.6MB
Sample260730-3lfknahd22
SHA256 c1f205c1f1adeedbfd52d1feea14e745ea438f4d44f9f328fc93fe61184c75a7
MD5 5c5cbbb19bcdd69856070782bf86f7ca
SHA1 a87f8d475b354faec7030f71896c189dc53aa8b9
SHA512 b7d15ab37939340f08952ccd38160562f9a046ccf854c7d483532cb62bd7e7771d587abaa5bacffdf7b1f4f543c599fae1f748284904f9e268f8fc5b003c85fd
SSDEEP 3072:QurXX+PBiSWHn9SBwcA/Z80HN1TFEGP8HOfwjQ6bdFor3Yz+HKa13jjjjjjjjjj7:pXVSOn9SBKh/TFEGBfw9vo7FHKa
TLSH
T18AE6EA617BF2A045F7FBCA3666314958AB37FC6BF96AC31F20448A5B1C21681CD46B13
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-30_5c5cbbb19bcdd69856070782bf86f7ca_amadey_elex_rhadamanthys_smoke-loader_stealc

File Explorer

2026-07-30_5c5cbbb19bcdd69856070782bf86f7ca_amadey_elex_rhadamanthys_smoke-loader_stealc

.exe 13.6MB

2026-07-30_5c5cbbb19bcdd69856070782bf86f7ca_amadey_elex_rhadamanthys_smoke-loader_stealc

IMPHASH 51faff478dd493c9f1e431a2afd51589
SHA256 c1f205c1f1adeedbfd52d1feea14e745ea438f4d44f9f328fc93fe61184c75a7
MD5 5c5cbbb19bcdd69856070782bf86f7ca
SHA1 a87f8d475b354faec7030f71896c189dc53aa8b9
SHA512 b7d15ab37939340f08952ccd38160562f9a046ccf854c7d483532cb62bd7e7771d587abaa5bacffdf7b1f4f543c599fae1f748284904f9e268f8fc5b003c85fd
SSDEEP 3072:QurXX+PBiSWHn9SBwcA/Z80HN1TFEGP8HOfwjQ6bdFor3Yz+HKa13jjjjjjjjjj7:pXVSOn9SBKh/TFEGBfw9vo7FHKa
TLSH
T18AE6EA617BF2A045F7FBCA3666314958AB37FC6BF96AC31F20448A5B1C21681CD46B13
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

21057

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindFirstFileW MoveFileExA InterlockedDecrement SetDefaultCommConfigW GetEnvironmentStringsW SetConsoleScreenBufferSize SetVolumeMountPointW GetSystemDefaultLCID GetModuleHandleW GetCommConfig GetConsoleAliasesLengthA ReadConsoleW GetConsoleAliasExesW GetDriveTypeA GetEnvironmentStrings GlobalAlloc GetPrivateProfileIntA LoadLibraryW TerminateThread ReadConsoleInputA CopyFileW SetConsoleCP DeleteVolumeMountPointW EnumSystemCodePagesA LocalReAlloc GetACP GetVolumePathNameA CreateMailslotW SetInformationJobObject CreateJobObjectA GetNamedPipeHandleStateW GetStartupInfoA GetLastError GetProcessVersion LoadLibraryA GetFileType RemoveDirectoryW FindAtomA FindNextFileA EnumDateFormatsA GetModuleHandleA SetLocaleInfoW FreeEnvironmentStringsW FindNextFileW VirtualProtect PurgeComm GetCurrentDirectoryA FatalAppExitA GetShortPathNameW ReadConsoleInputW FindAtomW GetWindowsDirectoryW FindFirstVolumeW AddConsoleAliasA EnumSystemLocalesW CreateFileW CloseHandle GetPrivateProfileSectionNamesW GetComputerNameA DisconnectNamedPipe GetCommandLineW RaiseException WriteConsoleW WideCharToMultiByte MoveFileA HeapAlloc EncodePointer DecodePointer HeapReAlloc HeapSetInformation GetStartupInfoW GetCPInfo InterlockedIncrement GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId GetProcAddress UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess ExitProcess WriteFile GetStdHandle GetModuleFileNameW HeapCreate EnterCriticalSection LeaveCriticalSection Sleep HeapSize HeapFree SetFilePointer SetHandleCount InitializeCriticalSectionAndSpinCount DeleteCriticalSection QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringW MultiByteToWideChar GetStringTypeW IsProcessorFeaturePresent RtlUnwind SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers ReadFile

user32

CharUpperW

gdi32

SelectPalette GetTextFaceW GetCharWidthA

shell32

DragFinish

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-30_5c5cbbb19bcdd69856070782bf86f7ca_amadey_elex_rhadamanthys_smoke-loader_stealc

kernel32

user32

gdi32

shell32

generic