2026-11-05_8721748cd917b87e82c6d8d4c51e0a7b_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

General

Target
2026-11-05_8721748cd917b87e82c6d8d4c51e0a7b_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
Size 12.1MB
Sample261106-v677eaet7n
SHA256 b18dfa0ff3264383ebacb61dbcf7659e23d41c06216922f30ce6be1107d11886
MD5 8721748cd917b87e82c6d8d4c51e0a7b
SHA1 f0052fddf9a0d0720ec6aa13ab3f9e3a0e94d15a
SHA512 045fd70fff15cb1f223cc6a187b7cb817cab63801db13ad7dd3b257e6e211a0ca3cfedd899300282fb5d80238df03366327af3be22170f703cbc4f2c4c049ee7
SSDEEP 12288:uefMf1mvOKCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC6:ue24v
TLSH
T113D64B0166F5BD4FF9FB5AB01D36BE882D3BBC83B62152CE1140222B1D765509EA3793
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-05_8721748cd917b87e82c6d8d4c51e0a7b_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

File Explorer

2026-11-05_8721748cd917b87e82c6d8d4c51e0a7b_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

.exe 12.1MB

2026-11-05_8721748cd917b87e82c6d8d4c51e0a7b_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

IMPHASH a2592ff0cb9d4716be385a37eb0faa8d
SHA256 b18dfa0ff3264383ebacb61dbcf7659e23d41c06216922f30ce6be1107d11886
MD5 8721748cd917b87e82c6d8d4c51e0a7b
SHA1 f0052fddf9a0d0720ec6aa13ab3f9e3a0e94d15a
SHA512 045fd70fff15cb1f223cc6a187b7cb817cab63801db13ad7dd3b257e6e211a0ca3cfedd899300282fb5d80238df03366327af3be22170f703cbc4f2c4c049ee7
SSDEEP 12288:uefMf1mvOKCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC6:ue24v
TLSH
T113D64B0166F5BD4FF9FB5AB01D36BE882D3BBC83B62152CE1140222B1D765509EA3793
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

11676

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\racikonuki.pdb

kernel32

LoadResource GlobalAddAtomA GetEnvironmentStringsW SetHandleInformation WaitForSingleObject EnumCalendarInfoExW GetConsoleAliasesLengthA GetSystemTimeAsFileTime GlobalAlloc GetLocaleInfoW DeleteVolumeMountPointW HeapValidate GetFileAttributesW GetDevicePowerState GetConsoleAliasesW GetLastError GetThreadLocale GetProcAddress VirtualAlloc GetFirmwareEnvironmentVariableW LoadLibraryA IsWow64Process CreateHardLinkW EnumResourceTypesW EnumDateFormatsA SetConsoleCursorInfo FindNextFileW GetConsoleTitleW FillConsoleOutputAttribute CheckRemoteDebuggerPresent LocalFree WriteConsoleW HeapReAlloc IsProcessorFeaturePresent DecodePointer EncodePointer GetModuleHandleW ExitProcess GetCommandLineW HeapSetInformation GetStartupInfoW HeapAlloc HeapFree UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection SetFilePointer EnterCriticalSection LeaveCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement CloseHandle LoadLibraryW WriteFile GetModuleFileNameW FreeEnvironmentStringsW HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetCPInfo GetACP GetOEMCP IsValidCodePage ReadFile Sleep SetStdHandle RtlUnwind WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers HeapSize RaiseException LCMapStringW MultiByteToWideChar GetStringTypeW CreateFileW

user32

SetCaretPos

ole32

CoGetMalloc

msimg32

TransparentBlt

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-05_8721748cd917b87e82c6d8d4c51e0a7b_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

kernel32

user32

ole32

msimg32

generic