General
- Target 2026-11-12_6fdaa7f49860090f53ea255be46943f3_amadey_elex_rhadamanthys_smoke-loader_stealc_tofsee
- Size 1.6MB
- Sample261113-avdhfaew8k
- SHA256 e2e2644c55c9414562ee175ae698e3e6b73756163ae57cd7121419347e5bc70d
- MD5 6fdaa7f49860090f53ea255be46943f3
- SHA1 4d5b36ab1f1fed3d1c34c8354f28a177ec89289c
- SHA512 47d7e58132931eef1e4085b88912a897bc755cc68d1c7dc6ef2b67ea803f8c7e06e5a12f8afae8b4707f3c49d1b1e7077886afcc0fccdc21947eaf1d7df13e76
- SSDEEP 24576:PKwif+sSFkDk7dAqjcQzWmvcuxzbAxjshdOSoBXg:LJsS2kdAUhzWmvhnMjgLw
- TLSH T1C475F16173E09072E17309306A7A9B31887EBC756970C58E73943A2D6E72BD1C978F27
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-12_6fdaa7f49860090f53ea255be46943f3_amadey_elex_rhadamanthys_smoke-loader_stealc_tofsee.exe
Resource
win10v2004-20260911-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-12_6fdaa7f49860090f53ea255be46943f3_amadey_elex_rhadamanthys_smoke-loader_stealc_tofsee
- Size 1.6MB
- SHA256 e2e2644c55c9414562ee175ae698e3e6b73756163ae57cd7121419347e5bc70d
- MD5 6fdaa7f49860090f53ea255be46943f3
- SHA1 4d5b36ab1f1fed3d1c34c8354f28a177ec89289c
- SHA512 47d7e58132931eef1e4085b88912a897bc755cc68d1c7dc6ef2b67ea803f8c7e06e5a12f8afae8b4707f3c49d1b1e7077886afcc0fccdc21947eaf1d7df13e76
- SSDEEP 24576:PKwif+sSFkDk7dAqjcQzWmvcuxzbAxjshdOSoBXg:LJsS2kdAUhzWmvhnMjgLw
- TLSH T1C475F16173E09072E17309306A7A9B31887EBC756970C58E73943A2D6E72BD1C978F27
- MD5 SHA1 SHA512 SSDEEP TLSH
Executes dropped EXE
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1