2026-10-01_6e6bc398dabc4c9849e8d46933daf93e_amadey_elex_rhadamanthys_smoke-loader_stealc_tofsee

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-01_6e6bc398dabc4c9849e8d46933daf93e_amadey_elex_rhadamanthys_smoke-loader_stealc_tofsee
Size 13.1MB
Sample261002-ppldeswxev
SHA256 8c11f0f40caee2900260bfed0fedcd32674ce49be665dc9ccc0d37dba58d9259
MD5 6e6bc398dabc4c9849e8d46933daf93e
SHA1 f1d575bcbb62f73115d2b02935409ead70786b70
SHA512 c7d1e6037556b0604069192e264f065692f59070be252102efc76202ba920f5afb7b75ac65bfc8cd1bc1af54831dc4e96832aee6c6ac6577a7917979e744a537
SSDEEP 6144:VHjBpYqdviTbDwkFyXapKagxexexexexexexexexexexexexexexexexexexexez:V3Yqd6B5wP
TLSH
T14CD6447392E13C44F6768E319E2F86E8361EFD919F1567EB12087A0B14711ADC1E2B1E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-01_6e6bc398dabc4c9849e8d46933daf93e_amadey_elex_rhadamanthys_smoke-loader_stealc_tofsee

File Explorer

2026-10-01_6e6bc398dabc4c9849e8d46933daf93e_amadey_elex_rhadamanthys_smoke-loader_stealc_tofsee

.exe 13.1MB

2026-10-01_6e6bc398dabc4c9849e8d46933daf93e_amadey_elex_rhadamanthys_smoke-loader_stealc_tofsee

IMPHASH bc34a2c3909f8b2826a0eea6cb6504aa
SHA256 8c11f0f40caee2900260bfed0fedcd32674ce49be665dc9ccc0d37dba58d9259
MD5 6e6bc398dabc4c9849e8d46933daf93e
SHA1 f1d575bcbb62f73115d2b02935409ead70786b70
SHA512 c7d1e6037556b0604069192e264f065692f59070be252102efc76202ba920f5afb7b75ac65bfc8cd1bc1af54831dc4e96832aee6c6ac6577a7917979e744a537
SSDEEP 6144:VHjBpYqdviTbDwkFyXapKagxexexexexexexexexexexexexexexexexexexexez:V3Yqd6B5wP
TLSH
T14CD6447392E13C44F6768E319E2F86E8361EFD919F1567EB12087A0B14711ADC1E2B1E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

16107

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFirmwareEnvironmentVariableW GetCPInfoExA CreateEventW GetSystemDirectoryW GetProcAddress GlobalAlloc SetDefaultCommConfigA OpenWaitableTimerA GetFileAttributesW EnumResourceTypesW WriteFileGather GetModuleHandleW CreateTimerQueue InterlockedCompareExchange LocalFlags GlobalLock GetConsoleAliasW WritePrivateProfileSectionA WriteProfileSectionW SetLastError ReadConsoleInputW lstrcmpA SetCalendarInfoA GetSystemWindowsDirectoryA GetConsoleAliasExesW EnumTimeFormatsA AddAtomA GetExitCodeThread _llseek FindNextFileW CopyFileA GetShortPathNameW EnumCalendarInfoA EnumCalendarInfoExA CreateActCtxA SetStdHandle FindFirstVolumeMountPointA PulseEvent SleepEx LoadLibraryA WriteConsoleW CloseHandle GetLastError HeapReAlloc HeapAlloc MoveFileA DeleteFileA GetCommandLineW HeapSetInformation GetStartupInfoW IsProcessorFeaturePresent EncodePointer DecodePointer HeapCreate HeapFree ExitProcess WriteFile GetStdHandle GetModuleFileNameW EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LoadLibraryW Sleep RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar WideCharToMultiByte HeapSize GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringW GetStringTypeW ReadFile SetFilePointer CreateFileW

user32

LoadMenuW GetComboBoxInfo DefDlgProcA GetListBoxInfo

gdi32

GetCharWidth32A

advapi32

LookupAccountSidW

shell32

FindExecutableA

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-01_6e6bc398dabc4c9849e8d46933daf93e_amadey_elex_rhadamanthys_smoke-loader_stealc_tofsee

kernel32

user32

gdi32

advapi32

shell32

generic