2026-09-16_a3dd6228671b5feac38b7eaa6f79a800_amadey_elex_karagany_rhadamanthys_smoke-loader_stealc

General

Target
2026-09-16_a3dd6228671b5feac38b7eaa6f79a800_amadey_elex_karagany_rhadamanthys_smoke-loader_stealc
Size 1.3MB
Sample260916-w74faaswdv
SHA256 37ae6e2cac0ec6d71d8b62c953188f2df29ab8a254202acc03759743d2b28383
MD5 a3dd6228671b5feac38b7eaa6f79a800
SHA1 2b891e8cdc23e32c6cf3b6f87f9a211773b287ce
SHA512 65e384731cb9a0057925ae3ce946994610a4e33d536fe2f4a8006efa205cc3e806577469c65b85ed931717158dfa5ea376db366009b2dddd98ff5847d72f2258
SSDEEP 12288:nNxXiJw/9Rrw0R1u4V/0YG3wx6EcJHUEhPUotFZr+1izHGNe8jKk34z:nv/TwSfVcYG3K/cJHlnFR+IGNe8j3Iz
TLSH
T1BD55239261C0D071E9BA10384A39D130A69D7D399B7948D3B3483A2E97B4FD6DF38367
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-16_a3dd6228671b5feac38b7eaa6f79a800_amadey_elex_karagany_rhadamanthys_smoke-loader_stealc

2026-09-16_a3dd6228671b5feac38b7eaa6f79a800_amadey_elex_karagany_rhadamanthys_smoke-loader_stealc

.exe 1.3MB

IMPHASH 2daa7d19633bfd71f21a585bb45bc54b
SHA256 37ae6e2cac0ec6d71d8b62c953188f2df29ab8a254202acc03759743d2b28383
MD5 a3dd6228671b5feac38b7eaa6f79a800
SHA1 2b891e8cdc23e32c6cf3b6f87f9a211773b287ce
SHA512 65e384731cb9a0057925ae3ce946994610a4e33d536fe2f4a8006efa205cc3e806577469c65b85ed931717158dfa5ea376db366009b2dddd98ff5847d72f2258
SSDEEP 12288:nNxXiJw/9Rrw0R1u4V/0YG3wx6EcJHUEhPUotFZr+1izHGNe8jKk34z:nv/TwSfVcYG3K/cJHlnFR+IGNe8j3Iz
TLSH
T1BD55239261C0D071E9BA10384A39D130A69D7D399B7948D3B3483A2E97B4FD6DF38367
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

1

Major OS version

5

Entry point

5265

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\adrien\Desktop\mytscredentials\TsCredentials\Release\TsCredentials.pdb