2026-08-15_dab905d50792311a0111795b854b5d6e_amadey_elex_rhadamanthys_smoke-loader_stealc

General

Target
2026-08-15_dab905d50792311a0111795b854b5d6e_amadey_elex_rhadamanthys_smoke-loader_stealc
Size 11.3MB
Sample260815-fxrezadh88
SHA256 51664dbc4aba91f2f3b5771993a16e26c818987b421b42b06053aab5fda7f4d1
MD5 dab905d50792311a0111795b854b5d6e
SHA1 4f4f1aa49d88871f18f0c6e6dd6af937360883f6
SHA512 6d35f5b1ace7d50d315c6db5f4232b02bfda1d30e39bea6a94a5ffe48e6f879e50333f255e2474cac2ea186e11609df720bbe51de5094891e1022f035ebc9e0e
SSDEEP 3072:nurXX+PBiSWHn9SBwcA/Z80HN1TFEGP8HOfwjQ6bdFor3Yz+HKa13jjjjjjjjjjH:EXVSOn9SBKh/TFEGBfw9vo7FHKa
TLSH
T128C6EA617BF2A045F7FBCA3666314958AB37FC6BF96AC31F20448A5B1C21681CD46B13
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-15_dab905d50792311a0111795b854b5d6e_amadey_elex_rhadamanthys_smoke-loader_stealc

File Explorer

2026-08-15_dab905d50792311a0111795b854b5d6e_amadey_elex_rhadamanthys_smoke-loader_stealc

.exe 11.3MB

2026-08-15_dab905d50792311a0111795b854b5d6e_amadey_elex_rhadamanthys_smoke-loader_stealc

IMPHASH 51faff478dd493c9f1e431a2afd51589
SHA256 51664dbc4aba91f2f3b5771993a16e26c818987b421b42b06053aab5fda7f4d1
MD5 dab905d50792311a0111795b854b5d6e
SHA1 4f4f1aa49d88871f18f0c6e6dd6af937360883f6
SHA512 6d35f5b1ace7d50d315c6db5f4232b02bfda1d30e39bea6a94a5ffe48e6f879e50333f255e2474cac2ea186e11609df720bbe51de5094891e1022f035ebc9e0e
SSDEEP 3072:nurXX+PBiSWHn9SBwcA/Z80HN1TFEGP8HOfwjQ6bdFor3Yz+HKa13jjjjjjjjjjH:EXVSOn9SBKh/TFEGBfw9vo7FHKa
TLSH
T128C6EA617BF2A045F7FBCA3666314958AB37FC6BF96AC31F20448A5B1C21681CD46B13
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

21057

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindFirstFileW MoveFileExA InterlockedDecrement SetDefaultCommConfigW GetEnvironmentStringsW SetConsoleScreenBufferSize SetVolumeMountPointW GetSystemDefaultLCID GetModuleHandleW GetCommConfig GetConsoleAliasesLengthA ReadConsoleW GetConsoleAliasExesW GetDriveTypeA GetEnvironmentStrings GlobalAlloc GetPrivateProfileIntA LoadLibraryW TerminateThread ReadConsoleInputA CopyFileW SetConsoleCP DeleteVolumeMountPointW EnumSystemCodePagesA LocalReAlloc GetACP GetVolumePathNameA CreateMailslotW SetInformationJobObject CreateJobObjectA GetNamedPipeHandleStateW GetStartupInfoA GetLastError GetProcessVersion LoadLibraryA GetFileType RemoveDirectoryW FindAtomA FindNextFileA EnumDateFormatsA GetModuleHandleA SetLocaleInfoW FreeEnvironmentStringsW FindNextFileW VirtualProtect PurgeComm GetCurrentDirectoryA FatalAppExitA GetShortPathNameW ReadConsoleInputW FindAtomW GetWindowsDirectoryW FindFirstVolumeW AddConsoleAliasA EnumSystemLocalesW CreateFileW CloseHandle GetPrivateProfileSectionNamesW GetComputerNameA DisconnectNamedPipe GetCommandLineW RaiseException WriteConsoleW WideCharToMultiByte MoveFileA HeapAlloc EncodePointer DecodePointer HeapReAlloc HeapSetInformation GetStartupInfoW GetCPInfo InterlockedIncrement GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId GetProcAddress UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess ExitProcess WriteFile GetStdHandle GetModuleFileNameW HeapCreate EnterCriticalSection LeaveCriticalSection Sleep HeapSize HeapFree SetFilePointer SetHandleCount InitializeCriticalSectionAndSpinCount DeleteCriticalSection QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringW MultiByteToWideChar GetStringTypeW IsProcessorFeaturePresent RtlUnwind SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers ReadFile

user32

CharUpperW

gdi32

SelectPalette GetTextFaceW GetCharWidthA

shell32

DragFinish

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-15_dab905d50792311a0111795b854b5d6e_amadey_elex_rhadamanthys_smoke-loader_stealc

kernel32

user32

gdi32

shell32

generic