2026-10-05_f7c978fe98cb5c839760ea1198b1a185_amadey_elex_rhadamanthys_smoke-loader_stealc_tofsee

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-05_f7c978fe98cb5c839760ea1198b1a185_amadey_elex_rhadamanthys_smoke-loader_stealc_tofsee
Size 11.5MB
Sample261006-a91xaaxfkd
SHA256 afd1e72b7987276dfc4a97d8e85a195ab20b9720b3e610cc64847669475b2e70
MD5 f7c978fe98cb5c839760ea1198b1a185
SHA1 c48cb6054e1c9700962e8cb591f1094391cbfbb0
SHA512 c4e19881ee0b23e8cab62bd46e0590a3f841e8a502f04aee757c9fa547bb941ca90362cc93dfa4eb51fba6763819dce65207a4498f96940e7f55bc9211999281
SSDEEP 6144:6HjBpYqdviTbDwkFyXapKagxexexexexexexexexexexexexexexexexexexexeK:i3Yqd6B5we
TLSH
T1DDC6447392E13C44F6768E319E2F86E8361EFD919F1567EB12087A0B14711ADC1E2B1E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-05_f7c978fe98cb5c839760ea1198b1a185_amadey_elex_rhadamanthys_smoke-loader_stealc_tofsee

File Explorer

2026-10-05_f7c978fe98cb5c839760ea1198b1a185_amadey_elex_rhadamanthys_smoke-loader_stealc_tofsee

.exe 11.5MB

2026-10-05_f7c978fe98cb5c839760ea1198b1a185_amadey_elex_rhadamanthys_smoke-loader_stealc_tofsee

IMPHASH bc34a2c3909f8b2826a0eea6cb6504aa
SHA256 afd1e72b7987276dfc4a97d8e85a195ab20b9720b3e610cc64847669475b2e70
MD5 f7c978fe98cb5c839760ea1198b1a185
SHA1 c48cb6054e1c9700962e8cb591f1094391cbfbb0
SHA512 c4e19881ee0b23e8cab62bd46e0590a3f841e8a502f04aee757c9fa547bb941ca90362cc93dfa4eb51fba6763819dce65207a4498f96940e7f55bc9211999281
SSDEEP 6144:6HjBpYqdviTbDwkFyXapKagxexexexexexexexexexexexexexexexexexexexeK:i3Yqd6B5we
TLSH
T1DDC6447392E13C44F6768E319E2F86E8361EFD919F1567EB12087A0B14711ADC1E2B1E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

16107

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFirmwareEnvironmentVariableW GetCPInfoExA CreateEventW GetSystemDirectoryW GetProcAddress GlobalAlloc SetDefaultCommConfigA OpenWaitableTimerA GetFileAttributesW EnumResourceTypesW WriteFileGather GetModuleHandleW CreateTimerQueue InterlockedCompareExchange LocalFlags GlobalLock GetConsoleAliasW WritePrivateProfileSectionA WriteProfileSectionW SetLastError ReadConsoleInputW lstrcmpA SetCalendarInfoA GetSystemWindowsDirectoryA GetConsoleAliasExesW EnumTimeFormatsA AddAtomA GetExitCodeThread _llseek FindNextFileW CopyFileA GetShortPathNameW EnumCalendarInfoA EnumCalendarInfoExA CreateActCtxA SetStdHandle FindFirstVolumeMountPointA PulseEvent SleepEx LoadLibraryA WriteConsoleW CloseHandle GetLastError HeapReAlloc HeapAlloc MoveFileA DeleteFileA GetCommandLineW HeapSetInformation GetStartupInfoW IsProcessorFeaturePresent EncodePointer DecodePointer HeapCreate HeapFree ExitProcess WriteFile GetStdHandle GetModuleFileNameW EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LoadLibraryW Sleep RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar WideCharToMultiByte HeapSize GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringW GetStringTypeW ReadFile SetFilePointer CreateFileW

user32

LoadMenuW GetComboBoxInfo DefDlgProcA GetListBoxInfo

gdi32

GetCharWidth32A

advapi32

LookupAccountSidW

shell32

FindExecutableA

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-05_f7c978fe98cb5c839760ea1198b1a185_amadey_elex_rhadamanthys_smoke-loader_stealc_tofsee

kernel32

user32

gdi32

advapi32

shell32

generic