2026-10-01_d798c7c8379fb5428dffa13ef5b537a6_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

General

Target
2026-10-01_d798c7c8379fb5428dffa13ef5b537a6_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
Size 11.9MB
Sample261002-bfcs2a1z8j
SHA256 5431624b0c3597d83ac661c53278a8a1f31e58b94602d6d4ecdbe49e701cf60a
MD5 d798c7c8379fb5428dffa13ef5b537a6
SHA1 02fd729aed235a006dd1b71caacf6c05f898b8e2
SHA512 01407319a95d1ffabc02e229c1b2b7fa02265ec6a2e0b0c873c9492ff299992bfbe75ed5f9e4a7f97e2f78d723bbe250d6867c0e4d23be7566aca280d580841f
SSDEEP 6144:sIMesd0aAdOtThIM0Lj+IZASlllllllllllllllllllllllllllllllllllllllF:sYsiase9IM0LjrZ
TLSH
T10CC698C38FA13E84EA254B77AF1F96E8764DFA90CE093B651118EE0F18B5176C163E11
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-01_d798c7c8379fb5428dffa13ef5b537a6_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

File Explorer

2026-10-01_d798c7c8379fb5428dffa13ef5b537a6_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

.exe 11.9MB

2026-10-01_d798c7c8379fb5428dffa13ef5b537a6_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

IMPHASH 21da461f3efed5a7777f903bfcf58d74
SHA256 5431624b0c3597d83ac661c53278a8a1f31e58b94602d6d4ecdbe49e701cf60a
MD5 d798c7c8379fb5428dffa13ef5b537a6
SHA1 02fd729aed235a006dd1b71caacf6c05f898b8e2
SHA512 01407319a95d1ffabc02e229c1b2b7fa02265ec6a2e0b0c873c9492ff299992bfbe75ed5f9e4a7f97e2f78d723bbe250d6867c0e4d23be7566aca280d580841f
SSDEEP 6144:sIMesd0aAdOtThIM0Lj+IZASlllllllllllllllllllllllllllllllllllllllF:sYsiase9IM0LjrZ
TLSH
T10CC698C38FA13E84EA254B77AF1F96E8764DFA90CE093B651118EE0F18B5176C163E11
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

28826

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumCalendarInfoA GetConsoleAliasesLengthW GetNumaProcessorNode MoveFileExA BuildCommDCBAndTimeoutsA SystemTimeToTzSpecificLocalTime InterlockedIncrement InterlockedDecrement SetDefaultCommConfigW CreateJobObjectW GetEnvironmentStringsW GetProfileStringW AddConsoleAliasW SetVolumeMountPointW GetModuleHandleW GenerateConsoleCtrlEvent GetNumberFormatA GetConsoleAliasExesW EnumTimeFormatsA GetCommandLineA GetDriveTypeA GetConsoleCP LoadLibraryW TerminateThread FatalAppExitW CopyFileW SetVolumeMountPointA SetConsoleCursorPosition GetStartupInfoW CreateMailslotW SetLocaleInfoA InterlockedExchange GetStartupInfoA SetThreadLocale GetHandleInformation GetLastError GetCurrentDirectoryW BackupRead RemoveDirectoryA EnumSystemCodePagesW LoadLibraryA OpenMutexA GetProcessId LocalAlloc EnumDateFormatsA GlobalUnWire GetModuleHandleA FreeEnvironmentStringsW FindNextFileW VirtualProtect GetCurrentDirectoryA PeekConsoleInputA GetShortPathNameW OpenSemaphoreW FindAtomW FindFirstVolumeW GetVolumeNameForVolumeMountPointW DeleteFileW CreateFileW ReadFile FlushFileBuffers GetCommandLineW FindFirstFileW GetFileSize EnumResourceNamesW GetComputerNameA GetPrivateProfileIntW Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection EncodePointer DecodePointer HeapAlloc GetProcAddress ExitProcess DeleteFileA HeapReAlloc HeapSetInformation RaiseException HeapFree RtlUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess IsProcessorFeaturePresent SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType WriteFile GetModuleFileNameW HeapCreate TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapSize QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage GetStringTypeW MultiByteToWideChar SetFilePointer WideCharToMultiByte GetConsoleMode LCMapStringW SetStdHandle WriteConsoleW CloseHandle

user32

GetComboBoxInfo CharUpperW

gdi32

GetBoundsRect SelectPalette GetTextFaceW

advapi32

LookupAccountSidW

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-01_d798c7c8379fb5428dffa13ef5b537a6_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

kernel32

user32

gdi32

advapi32

generic