2026-10-06_55157c32b76e2dc22482b4e07cf7afb7_amadey_elex_rhadamanthys_smoke-loader_stealc_tofsee

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-06_55157c32b76e2dc22482b4e07cf7afb7_amadey_elex_rhadamanthys_smoke-loader_stealc_tofsee
Size 10.4MB
Sample261006-ql155sfa86
SHA256 f560dc820d2a766cf9ccfb8192de833740c8b39f2f4935fcb6e0889fabece731
MD5 55157c32b76e2dc22482b4e07cf7afb7
SHA1 75df54f05e2f0132e824bf023ecbeaa554d2c701
SHA512 a6096c74fc70d2e6645484a6ed80d9a38f2d1caf37bc2d4178c3643ccf5f13b75fb74c843e7d91aa06226949ae7d4c14a6414fc029f9ecad7bf25667fb3b006e
SSDEEP 6144:oHjBpYqdviTbDwkFyXapKagxexexexexexexexexexexexexexexexexexexexeS:k3Yqd6B5wG
TLSH
T125B6447392E13C44F6768E319E2F86E8361EFD919F1567EB12087A0B14711ADC1E2B1E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-06_55157c32b76e2dc22482b4e07cf7afb7_amadey_elex_rhadamanthys_smoke-loader_stealc_tofsee

File Explorer

2026-10-06_55157c32b76e2dc22482b4e07cf7afb7_amadey_elex_rhadamanthys_smoke-loader_stealc_tofsee

.exe 10.4MB

2026-10-06_55157c32b76e2dc22482b4e07cf7afb7_amadey_elex_rhadamanthys_smoke-loader_stealc_tofsee

IMPHASH bc34a2c3909f8b2826a0eea6cb6504aa
SHA256 f560dc820d2a766cf9ccfb8192de833740c8b39f2f4935fcb6e0889fabece731
MD5 55157c32b76e2dc22482b4e07cf7afb7
SHA1 75df54f05e2f0132e824bf023ecbeaa554d2c701
SHA512 a6096c74fc70d2e6645484a6ed80d9a38f2d1caf37bc2d4178c3643ccf5f13b75fb74c843e7d91aa06226949ae7d4c14a6414fc029f9ecad7bf25667fb3b006e
SSDEEP 6144:oHjBpYqdviTbDwkFyXapKagxexexexexexexexexexexexexexexexexexexexeS:k3Yqd6B5wG
TLSH
T125B6447392E13C44F6768E319E2F86E8361EFD919F1567EB12087A0B14711ADC1E2B1E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

16107

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFirmwareEnvironmentVariableW GetCPInfoExA CreateEventW GetSystemDirectoryW GetProcAddress GlobalAlloc SetDefaultCommConfigA OpenWaitableTimerA GetFileAttributesW EnumResourceTypesW WriteFileGather GetModuleHandleW CreateTimerQueue InterlockedCompareExchange LocalFlags GlobalLock GetConsoleAliasW WritePrivateProfileSectionA WriteProfileSectionW SetLastError ReadConsoleInputW lstrcmpA SetCalendarInfoA GetSystemWindowsDirectoryA GetConsoleAliasExesW EnumTimeFormatsA AddAtomA GetExitCodeThread _llseek FindNextFileW CopyFileA GetShortPathNameW EnumCalendarInfoA EnumCalendarInfoExA CreateActCtxA SetStdHandle FindFirstVolumeMountPointA PulseEvent SleepEx LoadLibraryA WriteConsoleW CloseHandle GetLastError HeapReAlloc HeapAlloc MoveFileA DeleteFileA GetCommandLineW HeapSetInformation GetStartupInfoW IsProcessorFeaturePresent EncodePointer DecodePointer HeapCreate HeapFree ExitProcess WriteFile GetStdHandle GetModuleFileNameW EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LoadLibraryW Sleep RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar WideCharToMultiByte HeapSize GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringW GetStringTypeW ReadFile SetFilePointer CreateFileW

user32

LoadMenuW GetComboBoxInfo DefDlgProcA GetListBoxInfo

gdi32

GetCharWidth32A

advapi32

LookupAccountSidW

shell32

FindExecutableA

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-06_55157c32b76e2dc22482b4e07cf7afb7_amadey_elex_rhadamanthys_smoke-loader_stealc_tofsee

kernel32

user32

gdi32

advapi32

shell32

generic