2026-09-29_331e8409cb47bd71b2f6ed34a5807ef1_amadey_elex_rhadamanthys_smoke-loader_stealc_tofsee

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-29_331e8409cb47bd71b2f6ed34a5807ef1_amadey_elex_rhadamanthys_smoke-loader_stealc_tofsee
Size 15.0MB
Sample260930-2bsa2a1tgs
SHA256 db347d34e860460334389a26fe8490c3814478eb4c243158012aeff3a8a91c57
MD5 331e8409cb47bd71b2f6ed34a5807ef1
SHA1 b48b7928d288119e1399799d7fd9bcd00fa8c561
SHA512 662b3f01cfc0e92f82447f839164dcee4d69ed92c6bafd2573afc00e335346dcca5560c5346ba6691bde1663cbff96bdfb9a63ff14f347cee15bb9e5823f0990
SSDEEP 6144:yHjBpYqdviTbDwkFyXapKagxexexexexexexexexexexexexexexexexexexexeq:63Yqd6B5w+
TLSH
T19DF6447392E13C44F6768E319E2F86E8361EFD919F1567EB12087A0B14711ADC1E2B1E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-29_331e8409cb47bd71b2f6ed34a5807ef1_amadey_elex_rhadamanthys_smoke-loader_stealc_tofsee

File Explorer

2026-09-29_331e8409cb47bd71b2f6ed34a5807ef1_amadey_elex_rhadamanthys_smoke-loader_stealc_tofsee

.exe 15.0MB

2026-09-29_331e8409cb47bd71b2f6ed34a5807ef1_amadey_elex_rhadamanthys_smoke-loader_stealc_tofsee

IMPHASH bc34a2c3909f8b2826a0eea6cb6504aa
SHA256 db347d34e860460334389a26fe8490c3814478eb4c243158012aeff3a8a91c57
MD5 331e8409cb47bd71b2f6ed34a5807ef1
SHA1 b48b7928d288119e1399799d7fd9bcd00fa8c561
SHA512 662b3f01cfc0e92f82447f839164dcee4d69ed92c6bafd2573afc00e335346dcca5560c5346ba6691bde1663cbff96bdfb9a63ff14f347cee15bb9e5823f0990
SSDEEP 6144:yHjBpYqdviTbDwkFyXapKagxexexexexexexexexexexexexexexexexexexexeq:63Yqd6B5w+
TLSH
T19DF6447392E13C44F6768E319E2F86E8361EFD919F1567EB12087A0B14711ADC1E2B1E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

16107

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFirmwareEnvironmentVariableW GetCPInfoExA CreateEventW GetSystemDirectoryW GetProcAddress GlobalAlloc SetDefaultCommConfigA OpenWaitableTimerA GetFileAttributesW EnumResourceTypesW WriteFileGather GetModuleHandleW CreateTimerQueue InterlockedCompareExchange LocalFlags GlobalLock GetConsoleAliasW WritePrivateProfileSectionA WriteProfileSectionW SetLastError ReadConsoleInputW lstrcmpA SetCalendarInfoA GetSystemWindowsDirectoryA GetConsoleAliasExesW EnumTimeFormatsA AddAtomA GetExitCodeThread _llseek FindNextFileW CopyFileA GetShortPathNameW EnumCalendarInfoA EnumCalendarInfoExA CreateActCtxA SetStdHandle FindFirstVolumeMountPointA PulseEvent SleepEx LoadLibraryA WriteConsoleW CloseHandle GetLastError HeapReAlloc HeapAlloc MoveFileA DeleteFileA GetCommandLineW HeapSetInformation GetStartupInfoW IsProcessorFeaturePresent EncodePointer DecodePointer HeapCreate HeapFree ExitProcess WriteFile GetStdHandle GetModuleFileNameW EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LoadLibraryW Sleep RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar WideCharToMultiByte HeapSize GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringW GetStringTypeW ReadFile SetFilePointer CreateFileW

user32

LoadMenuW GetComboBoxInfo DefDlgProcA GetListBoxInfo

gdi32

GetCharWidth32A

advapi32

LookupAccountSidW

shell32

FindExecutableA

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-29_331e8409cb47bd71b2f6ed34a5807ef1_amadey_elex_rhadamanthys_smoke-loader_stealc_tofsee

kernel32

user32

gdi32

advapi32

shell32

generic