2026-10-10_76a31f3cc28983306260be99f5f1c53f_amadey_elex_karagany_rhadamanthys_smoke-loader_stealc_tofsee

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-10_76a31f3cc28983306260be99f5f1c53f_amadey_elex_karagany_rhadamanthys_smoke-loader_stealc_tofsee
Size 528KB
Sample261011-m3fc8agf42
SHA256 385155b55675cf3ba1aed30945ad6692831d87fc613f430bdebbf546e6e20fde
MD5 76a31f3cc28983306260be99f5f1c53f
SHA1 7626c6b36ee0b3e2033cf151bca6217a6bb52b09
SHA512 b2b302ed31692dde043b689c22d3e1cf77d7d691d0118b89950d0652c622d7205628c2215753c3cfdb0cf8acd0189159f3188988a4ef1673d7ece3d8536176a7
SSDEEP 3072:X1XuI4k+NEt+MR4TECeRgJFtr+C6aAWHlKbM/h3Q2lMFQ0i:Bui+No+MOFog4qtHyGOri
TLSH
T161B4AD717692D4F1F3961230D8258FB119BEBC710660464B77A83B6EAE723C065B532F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-10_76a31f3cc28983306260be99f5f1c53f_amadey_elex_karagany_rhadamanthys_smoke-loader_stealc_tofsee

File Explorer

2026-10-10_76a31f3cc28983306260be99f5f1c53f_amadey_elex_karagany_rhadamanthys_smoke-loader_stealc_tofsee

.exe 528KB

2026-10-10_76a31f3cc28983306260be99f5f1c53f_amadey_elex_karagany_rhadamanthys_smoke-loader_stealc_tofsee

IMPHASH 63210fcfffd0f4ad0671964b1d24e7c2
SHA256 385155b55675cf3ba1aed30945ad6692831d87fc613f430bdebbf546e6e20fde
MD5 76a31f3cc28983306260be99f5f1c53f
SHA1 7626c6b36ee0b3e2033cf151bca6217a6bb52b09
SHA512 b2b302ed31692dde043b689c22d3e1cf77d7d691d0118b89950d0652c622d7205628c2215753c3cfdb0cf8acd0189159f3188988a4ef1673d7ece3d8536176a7
SSDEEP 3072:X1XuI4k+NEt+MR4TECeRgJFtr+C6aAWHlKbM/h3Q2lMFQ0i:Bui+No+MOFog4qtHyGOri
TLSH
T161B4AD717692D4F1F3961230D8258FB119BEBC710660464B77A83B6EAE723C065B532F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

27008

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\hebuwo\kusofazu\jocametakozi_mozarolenif-jahu\zupa sawe16\yo.pdb

kernel32

LocalFlags GetConsoleTitleA GlobalAlloc LoadLibraryW GetProcessHandleCount InterlockedPopEntrySList LeaveCriticalSection WriteConsoleW GetMailslotInfo GetVolumePathNameA GetShortPathNameA GetConsoleAliasesW FillConsoleOutputCharacterW GetLongPathNameW SetLastError LoadLibraryA SetCalendarInfoW MoveFileA WriteProfileSectionW GetModuleFileNameA GetConsoleTitleW VirtualProtect GetFileAttributesExW GetCPInfoExA GetFileInformationByHandle CreateFileW HeapSize SetConsoleTextAttribute WriteConsoleOutputCharacterA GetConsoleAliasesLengthW SetStdHandle FreeResource FlushFileBuffers GetCommandLineW HeapSetInformation GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer DecodePointer TerminateProcess GetCurrentProcess HeapAlloc GetLastError HeapFree IsProcessorFeaturePresent EnterCriticalSection SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection GetProcAddress GetModuleHandleW ExitProcess WriteFile GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage Sleep RaiseException RtlUnwind MultiByteToWideChar LCMapStringW GetStringTypeW HeapReAlloc CloseHandle

user32

ClientToScreen

gdi32

GetTextExtentExPointA

advapi32

IsTokenRestricted ClearEventLogW

ole32

OleInitialize

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-10_76a31f3cc28983306260be99f5f1c53f_amadey_elex_karagany_rhadamanthys_smoke-loader_stealc_tofsee

kernel32

user32

gdi32

advapi32

ole32

generic