2026-10-28_6de371dfb11d4c8ced31509ebb612a26_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

General

Target
2026-10-28_6de371dfb11d4c8ced31509ebb612a26_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
Size 13.4MB
Sample261030-cxcd9sda84
SHA256 e5adcf17ed00f8588b79e0e605c38030ee2fa3fb647ca668d4fe32a634afe795
MD5 6de371dfb11d4c8ced31509ebb612a26
SHA1 cb57cfaaa3687246818a126c3e1529b292e3ad9d
SHA512 3c1fac22f90e79dc6b862b9488da5500904c50f618c819ca9ba051d2f42adf4569c330efd5a9c651dd4fa3476df6a0c946e68a3c7ec0bf3af7631876b71f82d6
SSDEEP 3072:mrEg4+jlrQ/peokrb2aapOQ49yDe206gqzANPtyu/uf4nm3CQ4++5lmjhhhhhhhp:LkQpeoSb2aVZU0+ARtyuW6fT5lm
TLSH
T119E6C742DBE280CDE86FC4B49B2EDFE07A75BCD486678EB3010469BF1CB4A114545AED
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-28_6de371dfb11d4c8ced31509ebb612a26_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

File Explorer

2026-10-28_6de371dfb11d4c8ced31509ebb612a26_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

.exe 13.4MB

2026-10-28_6de371dfb11d4c8ced31509ebb612a26_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

IMPHASH c614d8d8bcef689d6675c8b116f7714c
SHA256 e5adcf17ed00f8588b79e0e605c38030ee2fa3fb647ca668d4fe32a634afe795
MD5 6de371dfb11d4c8ced31509ebb612a26
SHA1 cb57cfaaa3687246818a126c3e1529b292e3ad9d
SHA512 3c1fac22f90e79dc6b862b9488da5500904c50f618c819ca9ba051d2f42adf4569c330efd5a9c651dd4fa3476df6a0c946e68a3c7ec0bf3af7631876b71f82d6
SSDEEP 3072:mrEg4+jlrQ/peokrb2aapOQ49yDe206gqzANPtyu/uf4nm3CQ4++5lmjhhhhhhhp:LkQpeoSb2aVZU0+ARtyuW6fT5lm
TLSH
T119E6C742DBE280CDE86FC4B49B2EDFE07A75BCD486678EB3010469BF1CB4A114545AED
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

36932

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

MoveFileExA CommConfigDialogA DeleteVolumeMountPointA GetConsoleAliasA InterlockedDecrement CreateJobObjectW HeapFree GetEnvironmentStringsW SetHandleInformation SetVolumeMountPointW OpenSemaphoreA GetModuleHandleW EnumCalendarInfoExW GetConsoleAliasExesW EnumTimeFormatsW GetUserDefaultLangID GetDriveTypeA AllocateUserPhysicalPages GlobalAlloc GetPrivateProfileIntA LoadLibraryW IsValidLocale GetCalendarInfoW GetStartupInfoW GetStartupInfoA GetCurrentDirectoryW SetLastError ReadConsoleOutputCharacterA GetNumaProcessorNode MoveFileW RemoveDirectoryA EnumSystemCodePagesW LoadLibraryA OpenMutexA UnhandledExceptionFilter InterlockedExchangeAdd GlobalGetAtomNameW AddAtomA GetPrivateProfileSectionNamesA GlobalUnWire GetModuleHandleA SetLocaleInfoW FatalExit FindNextFileW CreateMailslotA VirtualProtect GetCurrentDirectoryA FatalAppExitA PeekConsoleInputA GetShortPathNameW OpenSemaphoreW FindFirstVolumeA GetVolumeNameForVolumeMountPointW GetCurrentProcessId CloseHandle WriteConsoleW GetFileSize EnumResourceNamesW EnumDateFormatsExA GetCommandLineW SetStdHandle CreateFileW WideCharToMultiByte InterlockedIncrement InterlockedCompareExchange InterlockedExchange MultiByteToWideChar GetStringTypeW EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetLastError HeapAlloc DeleteFileA HeapSetInformation GetCPInfo RaiseException RtlUnwind LCMapStringW HeapCreate GetProcAddress ExitProcess WriteFile GetStdHandle GetModuleFileNameW SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType FreeEnvironmentStringsW TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetLocaleInfoW IsProcessorFeaturePresent HeapSize GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA HeapReAlloc SetFilePointer GetConsoleCP GetConsoleMode FlushFileBuffers ReadFile

user32

GetMessagePos

gdi32

SelectPalette GetCharABCWidthsW GetTextFaceA

shell32

DuplicateIcon

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-28_6de371dfb11d4c8ced31509ebb612a26_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

kernel32

user32

gdi32

shell32

generic