2026-11-05_c6fc43910ee5ade26273ab86c01da88a_elex_karagany_rhadamanthys_smoke-loader_stealc_wapomi

Sharing

Copy URL Twitter E-mail

General

Target
2026-11-05_c6fc43910ee5ade26273ab86c01da88a_elex_karagany_rhadamanthys_smoke-loader_stealc_wapomi
Size 60KB
Sample261106-lqy45aythy
SHA256 5809426729c0f98ed851a51bc1d0e5c9b973e0526fe90895b98ba2b9aa9b0747
MD5 c6fc43910ee5ade26273ab86c01da88a
SHA1 8dcf7ca7493a806d3f62106efeaaae7313680515
SHA512 bfb30d58623e89eeb5aa1f2cecb0a705f4313cd03b6fcdadb5e31caee8bf1c7c5321a825e74849fcf2ba08036275d89f6123fcaa7a2acd685bbbb9f37e69c747
SSDEEP 768:KqPnnByGt57EhDssh60dEDS2An7poavRofE0D94PY/kCesQGPL4vzZq2o9W7Gsxl:bPBRtj8Hz7xvN0DnhevGCq2iW7z
TLSH
T1ED538E1236D08476D0621B3058B5A7B26F3BBC615AB080AF3798267EDF727809D7835F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-05_c6fc43910ee5ade26273ab86c01da88a_elex_karagany_rhadamanthys_smoke-loader_stealc_wapomi

File Explorer

2026-11-05_c6fc43910ee5ade26273ab86c01da88a_elex_karagany_rhadamanthys_smoke-loader_stealc_wapomi

.exe 60KB

2026-11-05_c6fc43910ee5ade26273ab86c01da88a_elex_karagany_rhadamanthys_smoke-loader_stealc_wapomi

IMPHASH 23b1501a82fe975981e4093441b84d51
SHA256 5809426729c0f98ed851a51bc1d0e5c9b973e0526fe90895b98ba2b9aa9b0747
MD5 c6fc43910ee5ade26273ab86c01da88a
SHA1 8dcf7ca7493a806d3f62106efeaaae7313680515
SHA512 bfb30d58623e89eeb5aa1f2cecb0a705f4313cd03b6fcdadb5e31caee8bf1c7c5321a825e74849fcf2ba08036275d89f6123fcaa7a2acd685bbbb9f37e69c747
SSDEEP 768:KqPnnByGt57EhDssh60dEDS2An7poavRofE0D94PY/kCesQGPL4vzZq2o9W7Gsxl:bPBRtj8Hz7xvN0DnhevGCq2iW7z
TLSH
T1ED538E1236D08476D0621B3058B5A7B26F3BBC615AB080AF3798267EDF727809D7835F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

61440

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

imagehlp

MapFileAndCheckSumW

kernel32

GetCommandLineW LCMapStringW HeapReAlloc HeapAlloc HeapSize WideCharToMultiByte RtlUnwind IsValidCodePage GetOEMCP GetACP CopyFileW Sleep HeapFree GetCurrentProcess TerminateProcess IsDebuggerPresent UnhandledExceptionFilter LoadLibraryW EnterCriticalSection CreateFileW GetFileSize VirtualAlloc ReadFile VirtualFree CloseHandle SetFilePointer MultiByteToWideChar WriteFile GetCPInfo GetModuleHandleW LeaveCriticalSection HeapSetInformation GetStartupInfoW IsProcessorFeaturePresent SetUnhandledExceptionFilter GetProcAddress GetStringTypeW ExitProcess DecodePointer GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId GetLastError InterlockedDecrement HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime

user32

DialogBoxParamW ChildWindowFromPoint GetDlgItem ShowCursor SetCursor SetDlgItemTextW SendMessageW LoadCursorW SetWindowLongW MessageBeep EndDialog BeginPaint GetSysColor GetWindowRect GetParent MoveWindow EndPaint CallWindowProcW ScreenToClient GetWindowLongW MessageBoxW

gdi32

DeleteObject SetBkMode SetBkColor SelectObject SetTextColor GetTextExtentPoint32W TextOutW CreateFontW

comdlg32

GetOpenFileNameW

shell32

ShellExecuteExW

Name

.text

Size

18KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

�VY�uQ

Size

16KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-05_c6fc43910ee5ade26273ab86c01da88a_elex_karagany_rhadamanthys_smoke-loader_stealc_wapomi

imagehlp

kernel32

user32

gdi32

comdlg32

shell32

generic