General
- Target 2026-10-22_9458dd37e38424f9bae216e027f11deb_elex_mafia_rhadamanthys_smoke-loader_stealc_tofsee
- Size 737KB
- Sample261024-exhmdssvay
- SHA256 6aaba6d220d7f6f1a84ed690fb5fef9fd517477d2a0c55c9aaec967fb010c9f7
- MD5 9458dd37e38424f9bae216e027f11deb
- SHA1 45d6a474f4d95925dfae80ba8c423bb28804c0a9
- SHA512 9fb8aa962bf0831181703d205caf9adfc5ec7e556f664427106990c0a0137070c698be1c50debc75f83fa3d1b0b06e225d5189f3abec776976f5b6505489078e
- SSDEEP 12288:nkNAbGuYVie+0TZxWTXOvXjfaz4WxXbIUv0CNeVXXDGQFl5//qc2/3AeM3wNynFM:nkpVL+MUVoVXXC8Ac2YV3swxhZPegenB
- TLSH T17EF4023036C1C072E16311348AE4C7F54EBDBDB16361989FBBD91A79AF385D4A23136A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_9458dd37e38424f9bae216e027f11deb_elex_mafia_rhadamanthys_smoke-loader_stealc_tofsee.exe
Resource
win10v2004-20260911-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_9458dd37e38424f9bae216e027f11deb_elex_mafia_rhadamanthys_smoke-loader_stealc_tofsee.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_9458dd37e38424f9bae216e027f11deb_elex_mafia_rhadamanthys_smoke-loader_stealc_tofsee
- Size 737KB
- SHA256 6aaba6d220d7f6f1a84ed690fb5fef9fd517477d2a0c55c9aaec967fb010c9f7
- MD5 9458dd37e38424f9bae216e027f11deb
- SHA1 45d6a474f4d95925dfae80ba8c423bb28804c0a9
- SHA512 9fb8aa962bf0831181703d205caf9adfc5ec7e556f664427106990c0a0137070c698be1c50debc75f83fa3d1b0b06e225d5189f3abec776976f5b6505489078e
- SSDEEP 12288:nkNAbGuYVie+0TZxWTXOvXjfaz4WxXbIUv0CNeVXXDGQFl5//qc2/3AeM3wNynFM:nkpVL+MUVoVXXC8Ac2YV3swxhZPegenB
- TLSH T17EF4023036C1C072E16311348AE4C7F54EBDBDB16361989FBBD91A79AF385D4A23136A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1