2026-08-22_972e30b2ac610a7521aecd26412ce7f3_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

General

Target
2026-08-22_972e30b2ac610a7521aecd26412ce7f3_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
Size 14.0MB
Sample260823-e3pmwsej7x
SHA256 31ea5431dde3dc65c55e966a59f6af857efadb483467f921c1d20a899458a078
MD5 972e30b2ac610a7521aecd26412ce7f3
SHA1 513825e44603406e95a29ec5891825ecbf1e7890
SHA512 e0a82adf264225c45c6bc4b8d07311337ac3c1cc028dd6a8cbca8346988b10acf82807c68695524a7c9cd77f837e554238790b9a16663ff5b19569504bbff8ec
SSDEEP 3072:a+y2dpldAKbL1HF/r0gEfoh8S73sXqsMfjyLaW/dR83KU2behIATINbpuQy7Zv8I:y2Z5xl/rxKS7SMfmLaq6kaKASuQy1
TLSH
T1B5E62B3B05A40667D0340BBE37FC3F049EEF86A4E26D247B1535A9E8C9075A1ACDE45B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-22_972e30b2ac610a7521aecd26412ce7f3_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

File Explorer

2026-08-22_972e30b2ac610a7521aecd26412ce7f3_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

.exe 14.0MB

2026-08-22_972e30b2ac610a7521aecd26412ce7f3_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

IMPHASH d689b7d7e503e03a53b9a0767fcdaad8
SHA256 31ea5431dde3dc65c55e966a59f6af857efadb483467f921c1d20a899458a078
MD5 972e30b2ac610a7521aecd26412ce7f3
SHA1 513825e44603406e95a29ec5891825ecbf1e7890
SHA512 e0a82adf264225c45c6bc4b8d07311337ac3c1cc028dd6a8cbca8346988b10acf82807c68695524a7c9cd77f837e554238790b9a16663ff5b19569504bbff8ec
SSDEEP 3072:a+y2dpldAKbL1HF/r0gEfoh8S73sXqsMfjyLaW/dR83KU2behIATINbpuQy7Zv8I:y2Z5xl/rxKS7SMfmLaq6kaKASuQy1
TLSH
T1B5E62B3B05A40667D0340BBE37FC3F049EEF86A4E26D247B1535A9E8C9075A1ACDE45B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

23326

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

QueryActCtxW CreateDirectoryExW GetThreadSelectorEntry GetSystemPowerStatus FreeConsole GetFileAttributesW LocalReAlloc lstrlenW DisconnectNamedPipe BackupRead GetNumberFormatA DisableThreadLibraryCalls SetThreadPriorityBoost LocalAlloc MoveFileA GetPrivateProfileSectionNamesA VirtualProtect WaitForDebugEvent SetCalendarInfoA GetFileInformationByHandle FindNextVolumeA GetTickCount FreeEnvironmentStringsA SetThreadExecutionState lstrlenA DeleteTimerQueueEx GetFileSize GetTapeStatus ExitProcess InterlockedIncrement InterlockedDecrement EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetLastError HeapFree GetCommandLineA HeapSetInformation GetStartupInfoW RaiseException RtlUnwind HeapAlloc WideCharToMultiByte LCMapStringW MultiByteToWideChar GetCPInfo TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent HeapCreate SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType SetFilePointer CloseHandle GetProcAddress GetModuleHandleW WriteFile GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetLocaleInfoW HeapSize GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeW HeapReAlloc GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers LoadLibraryW WriteConsoleW CreateFileW

advapi32

InitiateSystemShutdownW AreAnyAccessesGranted OpenSCManagerA RegDeleteValueA GetAce QueryServiceLockStatusA RegisterEventSourceW RegSetValueExW

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-22_972e30b2ac610a7521aecd26412ce7f3_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

kernel32

advapi32

generic