2026-10-30_81feb75051e18a5f3f54b3818c17ca1c_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-30_81feb75051e18a5f3f54b3818c17ca1c_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
Size 191KB
Sample261030-3fg7asfx6x
SHA256 68090f73523e8600fb569af679d1776ccb9b5fa5fc09e645bd5d25c691306096
MD5 81feb75051e18a5f3f54b3818c17ca1c
SHA1 96279787b9542c81cc27a82aa06dc4ba83ae1d5c
SHA512 3b1d32ed8bace5c677df646b79d693ed50a500750c69c269efbf9ea6729814c832223bdf13a1086d83e036859be0ccba8fa88fdcc0237360d109bde60103d171
SSDEEP 3072:oIjr5wdFzX692+GDlU8CENyLHaUbrpJ+vNXxP+ai1GF6q:ok5wdFz8G5xCENyL6YCi
TLSH
T159147D2136D0C073D6A3353549E6E7B97ABEB8304F25974B3B940B7D1F316A18A2835B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-30_81feb75051e18a5f3f54b3818c17ca1c_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

File Explorer

2026-10-30_81feb75051e18a5f3f54b3818c17ca1c_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

.exe 191KB

2026-10-30_81feb75051e18a5f3f54b3818c17ca1c_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

IMPHASH 0f87846a4de7eeb36bb36368b5e2efb1
SHA256 68090f73523e8600fb569af679d1776ccb9b5fa5fc09e645bd5d25c691306096
MD5 81feb75051e18a5f3f54b3818c17ca1c
SHA1 96279787b9542c81cc27a82aa06dc4ba83ae1d5c
SHA512 3b1d32ed8bace5c677df646b79d693ed50a500750c69c269efbf9ea6729814c832223bdf13a1086d83e036859be0ccba8fa88fdcc0237360d109bde60103d171
SSDEEP 3072:oIjr5wdFzX692+GDlU8CENyLHaUbrpJ+vNXxP+ai1GF6q:ok5wdFz8G5xCENyL6YCi
TLSH
T159147D2136D0C073D6A3353549E6E7B97ABEB8304F25974B3B940B7D1F316A18A2835B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

57440

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

E:\BTSW\HostSW\Reference_Code\GetFileVer\Release\GetFileVer.pdb

version

VerQueryValueW GetFileVersionInfoW GetFileVersionInfoSizeW

kernel32

HeapAlloc HeapFree RtlUnwind Sleep ExitProcess RaiseException HeapSize HeapReAlloc TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetStdHandle GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA HeapCreate QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime VirtualAlloc InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA lstrlenA GetCurrentProcess FlushFileBuffers SetFilePointer WriteFile GlobalFindAtomW LoadLibraryA GetVersionExA GetCurrentProcessId GlobalAddAtomW InterlockedIncrement FormatMessageW TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalFree LocalAlloc GlobalFlags GlobalFree GlobalUnlock GetModuleHandleA InterlockedDecrement WritePrivateProfileStringW SetLastError SetErrorMode lstrlenW GlobalDeleteAtom GetCurrentThread GetCurrentThreadId ConvertDefaultLocale EnumResourceLanguagesW GetModuleFileNameW lstrcmpA GetLocaleInfoW LoadLibraryW MultiByteToWideChar FindResourceW LoadResource LockResource SizeofResource WideCharToMultiByte InterlockedExchange GlobalLock lstrcmpW GlobalAlloc FreeLibrary GetProcAddress GetModuleHandleW GetCommandLineW CloseHandle DeviceIoControl CreateFileW GetLastError VirtualFree

user32

DestroyMenu LoadCursorW GetSysColorBrush ShowWindow RegisterWindowMessageW LoadIconW WinHelpW GetCapture GetClassLongW SetPropW GetPropW RemovePropW IsWindow GetForegroundWindow GetDlgItem GetTopWindow DestroyWindow GetMessageTime GetMessagePos SetMenu SetForegroundWindow GetClientRect CreateWindowExW GetClassInfoExW GetClassInfoW RegisterClassW DefWindowProcW CallWindowProcW CopyRect GetMenu SetWindowLongW SetWindowPos SystemParametersInfoA IsIconic GetWindowPlacement GetSystemMetrics GetWindowThreadProcessId GetLastActivePopup IsWindowEnabled EnableWindow MessageBoxW GetMenuItemID GetSubMenu GetWindow GetDlgCtrlID GetWindowRect GetWindowLongW GetClassNameW PtInRect GetWindowTextW SetWindowTextW GetSysColor ReleaseDC GetDC ClientToScreen GrayStringW DrawTextExW DrawTextW TabbedTextOutW UnhookWindowsHookEx GetMenuItemCount SetCursor SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapW GetFocus GetParent ModifyMenuW GetMenuState EnableMenuItem CheckMenuItem SetWindowsHookExW CallNextHookEx GetMessageW TranslateMessage DispatchMessageW GetActiveWindow IsWindowVisible SendMessageW GetKeyState PeekMessageW GetCursorPos ValidateRect PostMessageW PostQuitMessage AdjustWindowRectEx MapWindowPoints

gdi32

DeleteDC GetStockObject ExtTextOutW GetDeviceCaps ScaleWindowExtEx TextOutW RectVisible PtVisible SetWindowExtEx ScaleViewportExtEx Escape SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SetBkColor RestoreDC SaveDC CreateBitmap DeleteObject GetClipBox SetMapMode SetTextColor SelectObject

winspool.drv

OpenPrinterW DocumentPropertiesW ClosePrinter

advapi32

RegQueryValueW RegOpenKeyW RegEnumKeyW RegDeleteKeyW RegSetValueExW RegCreateKeyExW RegOpenKeyExW RegQueryValueExW RegCloseKey

shlwapi

PathFindExtensionW PathFindFileNameW

oleaut32

VariantClear VariantChangeType VariantInit

bthprops.cpl

BluetoothFindFirstRadio BluetoothGetRadioInfo BluetoothFindRadioClose

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-30_81feb75051e18a5f3f54b3818c17ca1c_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

version

kernel32

user32

gdi32

winspool.drv

advapi32

shlwapi

oleaut32

bthprops.cpl

generic