2026-08-02_c0d18d996c7fc0148a92e0d31068a6cf_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee_wapomi

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-02_c0d18d996c7fc0148a92e0d31068a6cf_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee_wapomi
Size 205KB
Sample260802-q2fjdatfqb
SHA256 956a61e891bac28fe04658bb33eab4e93228ad1d3049b2c7d66923411225940b
MD5 c0d18d996c7fc0148a92e0d31068a6cf
SHA1 fb829b76d4b4344731294fa2ba0b5f06a5ef4b36
SHA512 3f9141eb1bc1f160b85c8a09dab259f080cefadb0c04981af5af452ef1e7849e81ca9c95cf6bc378a80f57ef009c79c0801b3a321ca3ae3efd1cc1e167b7443a
SSDEEP 3072:SJ3LOtoXrqdWoX8ib8qzsrEULieF8B6uRMEc7ly5NsZQ0GCH:SZgyrqdWjibwrEULieF66u/40seJ
TLSH
T1C6246C253AD0C073D2A3307109D5E7B56ABEB9718F31968B7BD00B7D5F306919A2835B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-02_c0d18d996c7fc0148a92e0d31068a6cf_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee_wapomi

File Explorer

2026-08-02_c0d18d996c7fc0148a92e0d31068a6cf_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee_wapomi

.exe 205KB

2026-08-02_c0d18d996c7fc0148a92e0d31068a6cf_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee_wapomi

IMPHASH 242b8722ad2af03af213f56b9f560611
SHA256 956a61e891bac28fe04658bb33eab4e93228ad1d3049b2c7d66923411225940b
MD5 c0d18d996c7fc0148a92e0d31068a6cf
SHA1 fb829b76d4b4344731294fa2ba0b5f06a5ef4b36
SHA512 3f9141eb1bc1f160b85c8a09dab259f080cefadb0c04981af5af452ef1e7849e81ca9c95cf6bc378a80f57ef009c79c0801b3a321ca3ae3efd1cc1e167b7443a
SSDEEP 3072:SJ3LOtoXrqdWoX8ib8qzsrEULieF8B6uRMEc7ly5NsZQ0GCH:SZgyrqdWjibwrEULieF66u/40seJ
TLSH
T1C6246C253AD0C073D2A3307109D5E7B56ABEB9718F31968B7BD00B7D5F306919A2835B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

217088

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

d:\Workspace\Driver\Setup\DriverSetup\Release\DriverSetup.pdb

kernel32

HeapAlloc HeapFree RtlUnwind Sleep RaiseException HeapReAlloc HeapSize TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetStdHandle GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA HeapCreate VirtualFree QueryPerformanceCounter GetTickCount VirtualAlloc InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetConsoleCP GetConsoleMode GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA GetCurrentProcess FlushFileBuffers SetFilePointer WriteFile lstrlenA GlobalFindAtomW LoadLibraryA GetVersionExA GlobalAddAtomW InterlockedIncrement TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc GlobalFlags GetModuleHandleA InterlockedDecrement WritePrivateProfileStringW GlobalFree GlobalUnlock FormatMessageW LocalFree SetErrorMode lstrlenW GetCurrentProcessId SetLastError GlobalDeleteAtom GetCurrentThread GetCurrentThreadId ConvertDefaultLocale EnumResourceLanguagesW lstrcmpA GetLocaleInfoW MultiByteToWideChar WideCharToMultiByte InterlockedExchange GlobalLock lstrcmpW GlobalAlloc FreeLibrary GetWindowsDirectoryW FindResourceW LoadResource LockResource SizeofResource CreateMutexW GetCommandLineW LoadLibraryW GetLastError GetProcAddress GetModuleHandleW ExitProcess CloseHandle GetExitCodeProcess WaitForSingleObject CreateProcessW GetSystemTimeAsFileTime GetModuleFileNameW

user32

DestroyMenu ShowWindow LoadCursorW GetSysColorBrush RegisterWindowMessageW LoadIconW WinHelpW GetCapture GetClassLongW SetPropW GetPropW RemovePropW IsWindow GetForegroundWindow GetDlgItem GetTopWindow DestroyWindow GetMessagePos MapWindowPoints SetMenu SetForegroundWindow GetClientRect CreateWindowExW GetClassInfoExW GetClassInfoW RegisterClassW AdjustWindowRectEx DefWindowProcW CallWindowProcW CopyRect GetMenu SetWindowLongW SetWindowPos SystemParametersInfoA IsIconic GetWindowPlacement GetSystemMetrics GetWindow GetDlgCtrlID GetWindowRect GetClassNameW PtInRect PostQuitMessage PostMessageW MessageBoxW EnableWindow GetWindowTextW SetWindowTextW GetSysColor ReleaseDC GetDC ClientToScreen GrayStringW DrawTextExW DrawTextW TabbedTextOutW GetMessageTime IsWindowEnabled GetLastActivePopup GetWindowLongW GetParent SendMessageW GetWindowThreadProcessId GetSubMenu GetMenuItemCount GetMenuItemID GetMenuState ValidateRect GetCursorPos PeekMessageW GetKeyState IsWindowVisible GetActiveWindow UnhookWindowsHookEx SetCursor SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapW GetFocus ModifyMenuW EnableMenuItem CheckMenuItem SetWindowsHookExW CallNextHookEx GetMessageW TranslateMessage DispatchMessageW

gdi32

DeleteDC GetStockObject ScaleWindowExtEx TextOutW SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape GetDeviceCaps RectVisible PtVisible DeleteObject GetClipBox SetMapMode SetTextColor SetBkColor RestoreDC SaveDC CreateBitmap ExtTextOutW

winspool.drv

DocumentPropertiesW OpenPrinterW ClosePrinter

advapi32

RegQueryValueW RegOpenKeyW RegEnumKeyW RegDeleteKeyW RegSetValueExW RegCreateKeyExW RegOpenKeyExW RegQueryValueExW RegCloseKey FreeSid AllocateAndInitializeSid

shlwapi

PathFindExtensionW PathFindFileNameW

oleaut32

VariantClear VariantChangeType VariantInit

Name

.text

Size

119KB

Virtual Size

119KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

30KB

Virtual Size

30KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

8KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

27KB

Virtual Size

26KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

s�J �u\

Size

16KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-02_c0d18d996c7fc0148a92e0d31068a6cf_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee_wapomi

kernel32

user32

gdi32

winspool.drv

advapi32

shlwapi

oleaut32

generic