2026-11-03_dececc14d76200822883fd34becd1c5c_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

General

Target
2026-11-03_dececc14d76200822883fd34becd1c5c_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
Size 10.9MB
Sample261104-gbbcassz2q
SHA256 6e807e7610b6f48791620384aac8f730d9a6a588003678906f6c1db7ce3784c1
MD5 dececc14d76200822883fd34becd1c5c
SHA1 f741bdd8edcc49a3852035d5dfa7f9adfadf62ee
SHA512 3de86ee4587b17061b73a39fd9b904a20727e439f98acd7987836690b5ae9283941c0157acce4c8b1a13e1be7d9b7968042536791784ab6253769bc41e7709a7
SSDEEP 12288:Aw7oFXQfQUGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGG+:AhXV
TLSH
T195B639003FE79919FAF3DA700872AAE79B3BFC536530864E1354235A2D75A925C4E723
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-03_dececc14d76200822883fd34becd1c5c_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

File Explorer

2026-11-03_dececc14d76200822883fd34becd1c5c_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

.exe 10.9MB

2026-11-03_dececc14d76200822883fd34becd1c5c_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

IMPHASH 16ab6d1050d2958813a9f0bd21397017
SHA256 6e807e7610b6f48791620384aac8f730d9a6a588003678906f6c1db7ce3784c1
MD5 dececc14d76200822883fd34becd1c5c
SHA1 f741bdd8edcc49a3852035d5dfa7f9adfadf62ee
SHA512 3de86ee4587b17061b73a39fd9b904a20727e439f98acd7987836690b5ae9283941c0157acce4c8b1a13e1be7d9b7968042536791784ab6253769bc41e7709a7
SSDEEP 12288:Aw7oFXQfQUGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGG+:AhXV
TLSH
T195B639003FE79919FAF3DA700872AAE79B3BFC536530864E1354235A2D75A925C4E723
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

15041

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\jukes87.pdb

kernel32

GetSystemDefaultLangID HeapCompact LoadResource GlobalAddAtomA GetEnvironmentStringsW SetHandleInformation WaitForSingleObject GetConsoleAliasesLengthA GetSystemTimeAsFileTime GetConsoleTitleA GlobalAlloc GetFirmwareEnvironmentVariableA GetLocaleInfoW CopyFileW LeaveCriticalSection GetFileAttributesA GetFileAttributesW GetDevicePowerState LCMapStringA GetConsoleAliasesW GetLastError GetProcAddress VirtualAlloc LoadLibraryA WaitForMultipleObjects EnumResourceTypesW EnumDateFormatsA SetConsoleCursorInfo FillConsoleOutputAttribute GlobalAddAtomW CheckRemoteDebuggerPresent EnumCalendarInfoExA LocalFree DecodePointer EncodePointer GetCommandLineW HeapSetInformation GetStartupInfoW GetModuleHandleW ExitProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapAlloc HeapFree SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection SetFilePointer EnterCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement CloseHandle WriteFile GetModuleFileNameW FreeEnvironmentStringsW HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId LoadLibraryW Sleep WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage ReadFile SetStdHandle RtlUnwind FlushFileBuffers HeapSize IsProcessorFeaturePresent HeapReAlloc RaiseException WriteConsoleW MultiByteToWideChar LCMapStringW GetStringTypeW CreateFileW

user32

SetCaretPos

ole32

CoGetMalloc

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-03_dececc14d76200822883fd34becd1c5c_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

kernel32

user32

ole32

generic