Overview

overview

10

Static

static

10

2025-04-03...er.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-04-03_c340aa33e5e049408b5cde62337a4b68_amadey_karagany_rhadamanthys_smoke-loader

  • Size

    108KB

  • MD5

    c340aa33e5e049408b5cde62337a4b68

  • SHA1

    a489fc8a32591b3e31597dec52cad3f551c0e84f

  • SHA256

    8823e6f891681233c4ffdef699f86696c1c475086a71820fa2dc53852f027760

  • SHA512

    5c7fe90a1cd9fba770dceae3ba0460e818beb4f231ca646af2074093a35b7e5c4c171e93ee16537cab75eb791a5564845c0ad5109c0ae52dff10859a3efc26cc

  • SSDEEP

    1536:nwUHibBDAEGNDL+VepMa+WIy1fAqR9SfPmtvki3bTKkVlnPbEh68XEPVWl5:w0i9D8pM9W91fAXev5jhEh68XEPVWl5

Score
10/10
valleyrat_s2

Malware Config

Extracted

Family

valleyrat_s2

Version

1.0

C2

154.219.97.191:6666

Attributes
  • campaign_date

    2025. 3.14

Signatures

  • Valleyrat_s2 family
    valleyrat_s2
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2025-04-03_c340aa33e5e049408b5cde62337a4b68_amadey_karagany_rhadamanthys_smoke-loader
    .exe windows:5 windows x86 arch:x86

    b8bf08fa843a9ec1ce10d80fbf550c26


    Headers

    Imports

    Exports

    Sections