2026-09-28_ee9bed8d6bbe1a96d34af2c38fa4cea9_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

General

Target
2026-09-28_ee9bed8d6bbe1a96d34af2c38fa4cea9_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
Size 994KB
Sample260928-16feaavdma
SHA256 d1d151f342db80f745f9490f6f2714ec886b7930843ec252569ba9e9540a6ddf
MD5 ee9bed8d6bbe1a96d34af2c38fa4cea9
SHA1 a0ec5ef7486e4e8abd8f8f3ed36d169938739835
SHA512 c1412ffbc5209083a608d9b1d0d2f20bce6237cd0a8c9c70881bae9936dc9ad2b6b6ac48d593692ac8de06bd68108669791c52f565ca8bec8e11c38f6ce9c34b
SSDEEP 24576:yk+0GrcjTXznLKuD4Q5VWp9pLE+Ohr6bZeTV2fJdDyI0:yknGA/jOmX7ivA+2wZeTVE/OI0
TLSH
T1E425029DF2CCC07DF92E623148C4C9B3BF76A0A917AB49B76BC827925B501D247342D6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-28_ee9bed8d6bbe1a96d34af2c38fa4cea9_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

2026-09-28_ee9bed8d6bbe1a96d34af2c38fa4cea9_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

.exe 994KB

SHA256 d1d151f342db80f745f9490f6f2714ec886b7930843ec252569ba9e9540a6ddf
MD5 ee9bed8d6bbe1a96d34af2c38fa4cea9
SHA1 a0ec5ef7486e4e8abd8f8f3ed36d169938739835
SHA512 c1412ffbc5209083a608d9b1d0d2f20bce6237cd0a8c9c70881bae9936dc9ad2b6b6ac48d593692ac8de06bd68108669791c52f565ca8bec8e11c38f6ce9c34b
SSDEEP 24576:yk+0GrcjTXznLKuD4Q5VWp9pLE+Ohr6bZeTV2fJdDyI0:yknGA/jOmX7ivA+2wZeTVE/OI0
TLSH
T1E425029DF2CCC07DF92E623148C4C9B3BF76A0A917AB49B76BC827925B501D247342D6
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

5

Entry point

52527

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths