General
- Target 2026-11-02_f91786dd1d34c5311a43a3b7407905f1_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 1.5MB
- Sample261102-wbbqdsby3z
- SHA256 cf483f8dc291fc03252547c8869cc71105b3ebd7bc757d652cb5d82012b4726d
- MD5 f91786dd1d34c5311a43a3b7407905f1
- SHA1 dd6f714908d641a38b951a42b33be194e2162cd6
- SHA512 0123fa7270550005ba34c22130a3eb588c99e8434a5f2a836b99851c2f9865c7930028464a0cd0fa9e835478e7cd15f987c4cbf0b4b7d3ec05d967b8f9986c7d
- SSDEEP 24576:tDF66jeNqsBYsywPc8peO3r/UN95cS9l0Tp7:pFkBYcPe+m9SS9uTp7
- TLSH T1467501353AE5C073C2B3317449D6D775AAAABCB08F60878B3BC06B7D5E34691962C316
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-02_f91786dd1d34c5311a43a3b7407905f1_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-02_f91786dd1d34c5311a43a3b7407905f1_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 1.5MB
- SHA256 cf483f8dc291fc03252547c8869cc71105b3ebd7bc757d652cb5d82012b4726d
- MD5 f91786dd1d34c5311a43a3b7407905f1
- SHA1 dd6f714908d641a38b951a42b33be194e2162cd6
- SHA512 0123fa7270550005ba34c22130a3eb588c99e8434a5f2a836b99851c2f9865c7930028464a0cd0fa9e835478e7cd15f987c4cbf0b4b7d3ec05d967b8f9986c7d
- SSDEEP 24576:tDF66jeNqsBYsywPc8peO3r/UN95cS9l0Tp7:pFkBYcPe+m9SS9uTp7
- TLSH T1467501353AE5C073C2B3317449D6D775AAAABCB08F60878B3BC06B7D5E34691962C316
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1