2026-10-06_9185c7bd665bad62308c52dca2fd219e_amadey_elex_karagany_rhadamanthys_smoke-loader_stealc_tofsee

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-06_9185c7bd665bad62308c52dca2fd219e_amadey_elex_karagany_rhadamanthys_smoke-loader_stealc_tofsee
Size 11.0MB
Sample261007-3d6rways2m
SHA256 80fb7483d4f567a0506eeddcfa1005dcd863fc1b21af7ead1664aac7c7d7c713
MD5 9185c7bd665bad62308c52dca2fd219e
SHA1 11b61d8cd14772821c0afd95c1bfeb474480bef2
SHA512 ef7fcf2e5db811caa2c82cd3b1cf482f19fca4cc66af4b9cbc3606f268fa05720bd588a4d615b95c3cc3c50ebd77b7eb1d2fe4b0fc4eec052dd34dd3f5945aa7
SSDEEP 6144:8ui+No+MOFog4qvHyGOrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrn:8uiGo+MOujYHy
TLSH
T16BC6E92ABE2129D2CAB9467D7B3C77415CFDCBB18254C26F848414D08C87AF719E9A37
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-06_9185c7bd665bad62308c52dca2fd219e_amadey_elex_karagany_rhadamanthys_smoke-loader_stealc_tofsee

File Explorer

2026-10-06_9185c7bd665bad62308c52dca2fd219e_amadey_elex_karagany_rhadamanthys_smoke-loader_stealc_tofsee

.exe 11.0MB

2026-10-06_9185c7bd665bad62308c52dca2fd219e_amadey_elex_karagany_rhadamanthys_smoke-loader_stealc_tofsee

IMPHASH 63210fcfffd0f4ad0671964b1d24e7c2
SHA256 80fb7483d4f567a0506eeddcfa1005dcd863fc1b21af7ead1664aac7c7d7c713
MD5 9185c7bd665bad62308c52dca2fd219e
SHA1 11b61d8cd14772821c0afd95c1bfeb474480bef2
SHA512 ef7fcf2e5db811caa2c82cd3b1cf482f19fca4cc66af4b9cbc3606f268fa05720bd588a4d615b95c3cc3c50ebd77b7eb1d2fe4b0fc4eec052dd34dd3f5945aa7
SSDEEP 6144:8ui+No+MOFog4qvHyGOrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrn:8uiGo+MOujYHy
TLSH
T16BC6E92ABE2129D2CAB9467D7B3C77415CFDCBB18254C26F848414D08C87AF719E9A37
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

27008

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\hebuwo\kusofazu\jocametakozi_mozarolenif-jahu\zupa sawe16\yo.pdb

kernel32

LocalFlags GetConsoleTitleA GlobalAlloc LoadLibraryW GetProcessHandleCount InterlockedPopEntrySList LeaveCriticalSection WriteConsoleW GetMailslotInfo GetVolumePathNameA GetShortPathNameA GetConsoleAliasesW FillConsoleOutputCharacterW GetLongPathNameW SetLastError LoadLibraryA SetCalendarInfoW MoveFileA WriteProfileSectionW GetModuleFileNameA GetConsoleTitleW VirtualProtect GetFileAttributesExW GetCPInfoExA GetFileInformationByHandle CreateFileW HeapSize SetConsoleTextAttribute WriteConsoleOutputCharacterA GetConsoleAliasesLengthW SetStdHandle FreeResource FlushFileBuffers GetCommandLineW HeapSetInformation GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer DecodePointer TerminateProcess GetCurrentProcess HeapAlloc GetLastError HeapFree IsProcessorFeaturePresent EnterCriticalSection SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection GetProcAddress GetModuleHandleW ExitProcess WriteFile GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage Sleep RaiseException RtlUnwind MultiByteToWideChar LCMapStringW GetStringTypeW HeapReAlloc CloseHandle

user32

ClientToScreen

gdi32

GetTextExtentExPointA

advapi32

IsTokenRestricted ClearEventLogW

ole32

OleInitialize

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-06_9185c7bd665bad62308c52dca2fd219e_amadey_elex_karagany_rhadamanthys_smoke-loader_stealc_tofsee

kernel32

user32

gdi32

advapi32

ole32

generic