2026-10-03_ae62accd88602dac05176340ff76141a_amadey_elex_rhadamanthys_smoke-loader_stealc_tofsee

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-03_ae62accd88602dac05176340ff76141a_amadey_elex_rhadamanthys_smoke-loader_stealc_tofsee
Size 13.5MB
Sample261004-e444zatz9r
SHA256 b8a7a7bc9d42b39d8d5a1af5419c2973db8554169284ff80c01575177237e224
MD5 ae62accd88602dac05176340ff76141a
SHA1 61f0dd51340a5f09feb9174d0bc68448b7100ae6
SHA512 f4bbc9d04a387ffb7cb95eeaac4d5f0ca86fb7228a41d12b2e202337c0f980cc1facd53d5050f2f42c13df94137d5b20f6a66e3c897116076835673fff08f84d
SSDEEP 6144:aHjBpYqdviTbDwkFyXapKagxexexexexexexexexexexexexexexexexexexexeK:C3Yqd6B5we
TLSH
T1A6E6447392E13C44F6768E319E2F86E8361EFD919F1567EB12087A0B14711ADC1E2B1E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-03_ae62accd88602dac05176340ff76141a_amadey_elex_rhadamanthys_smoke-loader_stealc_tofsee

File Explorer

2026-10-03_ae62accd88602dac05176340ff76141a_amadey_elex_rhadamanthys_smoke-loader_stealc_tofsee

.exe 13.5MB

2026-10-03_ae62accd88602dac05176340ff76141a_amadey_elex_rhadamanthys_smoke-loader_stealc_tofsee

IMPHASH bc34a2c3909f8b2826a0eea6cb6504aa
SHA256 b8a7a7bc9d42b39d8d5a1af5419c2973db8554169284ff80c01575177237e224
MD5 ae62accd88602dac05176340ff76141a
SHA1 61f0dd51340a5f09feb9174d0bc68448b7100ae6
SHA512 f4bbc9d04a387ffb7cb95eeaac4d5f0ca86fb7228a41d12b2e202337c0f980cc1facd53d5050f2f42c13df94137d5b20f6a66e3c897116076835673fff08f84d
SSDEEP 6144:aHjBpYqdviTbDwkFyXapKagxexexexexexexexexexexexexexexexexexexexeK:C3Yqd6B5we
TLSH
T1A6E6447392E13C44F6768E319E2F86E8361EFD919F1567EB12087A0B14711ADC1E2B1E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

16107

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFirmwareEnvironmentVariableW GetCPInfoExA CreateEventW GetSystemDirectoryW GetProcAddress GlobalAlloc SetDefaultCommConfigA OpenWaitableTimerA GetFileAttributesW EnumResourceTypesW WriteFileGather GetModuleHandleW CreateTimerQueue InterlockedCompareExchange LocalFlags GlobalLock GetConsoleAliasW WritePrivateProfileSectionA WriteProfileSectionW SetLastError ReadConsoleInputW lstrcmpA SetCalendarInfoA GetSystemWindowsDirectoryA GetConsoleAliasExesW EnumTimeFormatsA AddAtomA GetExitCodeThread _llseek FindNextFileW CopyFileA GetShortPathNameW EnumCalendarInfoA EnumCalendarInfoExA CreateActCtxA SetStdHandle FindFirstVolumeMountPointA PulseEvent SleepEx LoadLibraryA WriteConsoleW CloseHandle GetLastError HeapReAlloc HeapAlloc MoveFileA DeleteFileA GetCommandLineW HeapSetInformation GetStartupInfoW IsProcessorFeaturePresent EncodePointer DecodePointer HeapCreate HeapFree ExitProcess WriteFile GetStdHandle GetModuleFileNameW EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LoadLibraryW Sleep RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar WideCharToMultiByte HeapSize GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringW GetStringTypeW ReadFile SetFilePointer CreateFileW

user32

LoadMenuW GetComboBoxInfo DefDlgProcA GetListBoxInfo

gdi32

GetCharWidth32A

advapi32

LookupAccountSidW

shell32

FindExecutableA

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-03_ae62accd88602dac05176340ff76141a_amadey_elex_rhadamanthys_smoke-loader_stealc_tofsee

kernel32

user32

gdi32

advapi32

shell32

generic