2026-08-09_64c755b0bb0b9fc5cd936f72018c28c1_amadey_elex_rhadamanthys_smoke-loader_stealc_stop

General

Target
2026-08-09_64c755b0bb0b9fc5cd936f72018c28c1_amadey_elex_rhadamanthys_smoke-loader_stealc_stop
Size 107KB
Sample260809-t7d5aasamd
SHA256 3ef9a1065dfc75d60e0c0aa588a65e02167fbef9754ff785c8fdf95468ed554e
MD5 64c755b0bb0b9fc5cd936f72018c28c1
SHA1 ecc4fff81a818ecc73980ef96a353afbd53c68c1
SHA512 6e57027cbef1b29b213a8de65336b155b46f6fcb495c39607f4cff1248dd0ba292f3a1de0255cb048162aab756da6c1401a0e635b4600a3dfb9ae4d234c95618
SSDEEP 1536:SjiLwNLVV+Z77trPMdYX5Y63r7HReC1oL1c63r7HReC1oL1:SNNLVV+pqdy5TxeCo1/xeCo1
TLSH
T167B34A287F8ACE34E424D6354846A7A1497D3EAB4D318E4E7EB5393F6E315F2412206F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-09_64c755b0bb0b9fc5cd936f72018c28c1_amadey_elex_rhadamanthys_smoke-loader_stealc_stop

File Explorer

2026-08-09_64c755b0bb0b9fc5cd936f72018c28c1_amadey_elex_rhadamanthys_smoke-loader_stealc_stop

.exe 107KB

2026-08-09_64c755b0bb0b9fc5cd936f72018c28c1_amadey_elex_rhadamanthys_smoke-loader_stealc_stop

IMPHASH c035682db74ab6268fd21ef91de322f9
SHA256 3ef9a1065dfc75d60e0c0aa588a65e02167fbef9754ff785c8fdf95468ed554e
MD5 64c755b0bb0b9fc5cd936f72018c28c1
SHA1 ecc4fff81a818ecc73980ef96a353afbd53c68c1
SHA512 6e57027cbef1b29b213a8de65336b155b46f6fcb495c39607f4cff1248dd0ba292f3a1de0255cb048162aab756da6c1401a0e635b4600a3dfb9ae4d234c95618
SSDEEP 1536:SjiLwNLVV+Z77trPMdYX5Y63r7HReC1oL1c63r7HReC1oL1:SNNLVV+pqdy5TxeCo1/xeCo1
TLSH
T167B34A287F8ACE34E424D6354846A7A1497D3EAB4D318E4E7EB5393F6E315F2412206F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

6747

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\My Projects\comboost\Release\comboost.pdb

kernel32

GetCurrentProcess GetPrivateProfileIntW SetPriorityClass GlobalMemoryStatus Beep GetModuleFileNameW lstrlenW WaitForSingleObject GetStringTypeW GetStringTypeA LCMapStringW MultiByteToWideChar LCMapStringA WideCharToMultiByte GetLocaleInfoA HeapSize IsValidCodePage GetOEMCP GetACP GetCPInfo HeapAlloc GetLastError HeapFree GetStartupInfoW TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate GetModuleHandleW Sleep GetProcAddress ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind LoadLibraryA

user32

EndDialog PostQuitMessage EndPaint DefWindowProcW DestroyWindow DialogBoxParamW CreateWindowExW RegisterClassExW LoadCursorW LoadIconW LoadAcceleratorsW LoadStringW BeginPaint

shell32

ShellExecuteExW

shlwapi

StrRChrW StrCpyW StrCatW StrChrW

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-09_64c755b0bb0b9fc5cd936f72018c28c1_amadey_elex_rhadamanthys_smoke-loader_stealc_stop

kernel32

user32

shell32

shlwapi

generic