2026-09-16_b12341cf32da5022feddcf0c506f0926_amadey_elex_rhadamanthys_smoke-loader_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-16_b12341cf32da5022feddcf0c506f0926_amadey_elex_rhadamanthys_smoke-loader_stealc
Size 584KB
Sample260916-wl7wkstdlh
SHA256 7fab52b3905850e4bc0da3ad050f99bbd7f284f64aa1a68ebb01ef2803fd3d02
MD5 b12341cf32da5022feddcf0c506f0926
SHA1 36a3643a41ceeb88c4eb26adc9080b452c5e995e
SHA512 f6d5eb1567edf3c3a655f81596a084074cde87d965cb1ad8d8fb6e1caaf4f6828622269b3e2c365cba9f83b516d1af605c0a3a150d2402b1ae5b13af1a4b23e5
SSDEEP 12288:dKpGTRIY8uEnlhGT8aGrpSHsydHb3nMq3EFziQv1f3mfMwt:dNRIYEjGQloH573nH3EFzVv1u7
TLSH
T1FBD42218E742C471D022AA385679C3A3AF2938365F74D6D37789117C5EF26C2A9F83C2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-16_b12341cf32da5022feddcf0c506f0926_amadey_elex_rhadamanthys_smoke-loader_stealc

File Explorer

2026-09-16_b12341cf32da5022feddcf0c506f0926_amadey_elex_rhadamanthys_smoke-loader_stealc

.exe 584KB

2026-09-16_b12341cf32da5022feddcf0c506f0926_amadey_elex_rhadamanthys_smoke-loader_stealc

IMPHASH 9d87275419603abb20f5f1f078df04ba
SHA256 7fab52b3905850e4bc0da3ad050f99bbd7f284f64aa1a68ebb01ef2803fd3d02
MD5 b12341cf32da5022feddcf0c506f0926
SHA1 36a3643a41ceeb88c4eb26adc9080b452c5e995e
SHA512 f6d5eb1567edf3c3a655f81596a084074cde87d965cb1ad8d8fb6e1caaf4f6828622269b3e2c365cba9f83b516d1af605c0a3a150d2402b1ae5b13af1a4b23e5
SSDEEP 12288:dKpGTRIY8uEnlhGT8aGrpSHsydHb3nMq3EFziQv1f3mfMwt:dNRIYEjGQloH573nH3EFzVv1u7
TLSH
T1FBD42218E742C471D022AA385679C3A3AF2938365F74D6D37789117C5EF26C2A9F83C2
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

16353

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetWindowsDirectoryA FindFirstVolumeMountPointA ReleaseSemaphore ReadConsoleInputW VerifyVersionInfoA GetCPInfoExA CreateEventW GetSystemDirectoryW GetProcAddress GetModuleHandleA LocalAlloc SetWaitableTimer DeleteFileA EnumResourceTypesA GetModuleHandleW SetThreadLocale GetComputerNameExA GetConsoleAliasA WriteProfileSectionA GetLastError WriteConsoleInputW AssignProcessToJobObject SetCalendarInfoW QueryInformationJobObject GetComputerNameW EnumTimeFormatsA AddAtomA SetSystemTime _llseek FindNextFileW FoldStringW GetShortPathNameA EnumCalendarInfoA EnumCalendarInfoExA GlobalAlloc CreateActCtxW GetConsoleCursorInfo CloseHandle ReadFile WriteConsoleW HeapSize FillConsoleOutputAttribute LoadLibraryW WideCharToMultiByte HeapReAlloc HeapAlloc MoveFileA GetCommandLineW HeapSetInformation GetStartupInfoW GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage EncodePointer TlsAlloc TlsGetValue TlsSetValue DecodePointer TlsFree SetLastError GetCurrentThreadId UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapCreate HeapFree ExitProcess WriteFile GetStdHandle GetModuleFileNameW EnterCriticalSection LeaveCriticalSection SetFilePointer SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringW MultiByteToWideChar GetStringTypeW Sleep IsProcessorFeaturePresent SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind CreateFileW

user32

LoadMenuW GetMenuInfo GetListBoxInfo

gdi32

GetCharWidth32A

shell32

FindExecutableA

winhttp

WinHttpReadData

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-16_b12341cf32da5022feddcf0c506f0926_amadey_elex_rhadamanthys_smoke-loader_stealc

kernel32

user32

gdi32

shell32

winhttp

generic