2026-11-07_ca83e1c9207e7d86f004473f2722b4ec_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

General

Target
2026-11-07_ca83e1c9207e7d86f004473f2722b4ec_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
Size 12.3MB
Sample261108-har44ahd89
SHA256 44d19b1afa7c625d8bcafaebeeaa1db105ab02850b2290c97a5fef59a33240b9
MD5 ca83e1c9207e7d86f004473f2722b4ec
SHA1 afb069ab6b53b978578da699c1a97161bdaf4237
SHA512 77c8e812508cdc302f8244697fbf47ad893e9eed1ba93eb8368a8da1903048670d1ca541d84da97e7d4a7c0a176541759bde5eb2cdcaabfd6815f9e08f7322a8
SSDEEP 3072:drEg4+jlrQ/peokrb2aapOQ49yDe206gqzANPtyu/uf4nm3CQ4++5lmjhhhhhhhn:GkQpeoSb2aVZU0+ARtyuW6fT5lm
TLSH
T1E2D6C742DBE280CDE86FC4B49B2EDFE07A75BCD486678EB3010469BF1CB4A114545AED
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-07_ca83e1c9207e7d86f004473f2722b4ec_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

File Explorer

2026-11-07_ca83e1c9207e7d86f004473f2722b4ec_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

.exe 12.3MB

2026-11-07_ca83e1c9207e7d86f004473f2722b4ec_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

IMPHASH c614d8d8bcef689d6675c8b116f7714c
SHA256 44d19b1afa7c625d8bcafaebeeaa1db105ab02850b2290c97a5fef59a33240b9
MD5 ca83e1c9207e7d86f004473f2722b4ec
SHA1 afb069ab6b53b978578da699c1a97161bdaf4237
SHA512 77c8e812508cdc302f8244697fbf47ad893e9eed1ba93eb8368a8da1903048670d1ca541d84da97e7d4a7c0a176541759bde5eb2cdcaabfd6815f9e08f7322a8
SSDEEP 3072:drEg4+jlrQ/peokrb2aapOQ49yDe206gqzANPtyu/uf4nm3CQ4++5lmjhhhhhhhn:GkQpeoSb2aVZU0+ARtyuW6fT5lm
TLSH
T1E2D6C742DBE280CDE86FC4B49B2EDFE07A75BCD486678EB3010469BF1CB4A114545AED
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

36932

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

MoveFileExA CommConfigDialogA DeleteVolumeMountPointA GetConsoleAliasA InterlockedDecrement CreateJobObjectW HeapFree GetEnvironmentStringsW SetHandleInformation SetVolumeMountPointW OpenSemaphoreA GetModuleHandleW EnumCalendarInfoExW GetConsoleAliasExesW EnumTimeFormatsW GetUserDefaultLangID GetDriveTypeA AllocateUserPhysicalPages GlobalAlloc GetPrivateProfileIntA LoadLibraryW IsValidLocale GetCalendarInfoW GetStartupInfoW GetStartupInfoA GetCurrentDirectoryW SetLastError ReadConsoleOutputCharacterA GetNumaProcessorNode MoveFileW RemoveDirectoryA EnumSystemCodePagesW LoadLibraryA OpenMutexA UnhandledExceptionFilter InterlockedExchangeAdd GlobalGetAtomNameW AddAtomA GetPrivateProfileSectionNamesA GlobalUnWire GetModuleHandleA SetLocaleInfoW FatalExit FindNextFileW CreateMailslotA VirtualProtect GetCurrentDirectoryA FatalAppExitA PeekConsoleInputA GetShortPathNameW OpenSemaphoreW FindFirstVolumeA GetVolumeNameForVolumeMountPointW GetCurrentProcessId CloseHandle WriteConsoleW GetFileSize EnumResourceNamesW EnumDateFormatsExA GetCommandLineW SetStdHandle CreateFileW WideCharToMultiByte InterlockedIncrement InterlockedCompareExchange InterlockedExchange MultiByteToWideChar GetStringTypeW EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetLastError HeapAlloc DeleteFileA HeapSetInformation GetCPInfo RaiseException RtlUnwind LCMapStringW HeapCreate GetProcAddress ExitProcess WriteFile GetStdHandle GetModuleFileNameW SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType FreeEnvironmentStringsW TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetLocaleInfoW IsProcessorFeaturePresent HeapSize GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA HeapReAlloc SetFilePointer GetConsoleCP GetConsoleMode FlushFileBuffers ReadFile

user32

GetMessagePos

gdi32

SelectPalette GetCharABCWidthsW GetTextFaceA

shell32

DuplicateIcon

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-07_ca83e1c9207e7d86f004473f2722b4ec_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee

kernel32

user32

gdi32

shell32

generic