2025-06-04_7c21ec4d83774d3e21f423888226e8f8_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee

General

Target
2025-06-04_7c21ec4d83774d3e21f423888226e8f8_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
Size 283KB
Sample250604-1rymbaej3x
SHA256 d62f1e7bfffdff6effe8eaa91dfe90dbb2ff6f23d4af95d07b3e46babd1d4ab6
MD5 7c21ec4d83774d3e21f423888226e8f8
SHA1 2305989d57d1cc32fd40a25397fb74e99b09f934
SHA512 7fd93212954acdc0f7d91aca5addc16028bad5078d20d04d9625e1f1e08c26ecde483d598553f32a05bd158b9f5b86647ef5258871fbd9bc586042b90dd40c3f
SSDEEP 6144:slikqESLncBKczh82Vryq6yBuzbgwu/HCwVfUg:slFq/zcBKuh8T6unnMHyg
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2025-06-04_7c21ec4d83774d3e21f423888226e8f8_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee

File Explorer

2025-06-04_7c21ec4d83774d3e21f423888226e8f8_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee

.exe 283KB

2025-06-04_7c21ec4d83774d3e21f423888226e8f8_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee

IMPHASH 42a501f928c5dd1dcc273017d496927f
SHA256 d62f1e7bfffdff6effe8eaa91dfe90dbb2ff6f23d4af95d07b3e46babd1d4ab6
MD5 7c21ec4d83774d3e21f423888226e8f8
SHA1 2305989d57d1cc32fd40a25397fb74e99b09f934
SHA512 7fd93212954acdc0f7d91aca5addc16028bad5078d20d04d9625e1f1e08c26ecde483d598553f32a05bd158b9f5b86647ef5258871fbd9bc586042b90dd40c3f
SSDEEP 6144:slikqESLncBKczh82Vryq6yBuzbgwu/HCwVfUg:slFq/zcBKuh8T6unnMHyg
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

36550

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\poyeheyotiwaho\guhava\ti.pdb

kernel32

InterlockedExchangeAdd OpenWaitableTimerA CreateEventW ReadConsoleInputW WaitNamedPipeA SetVolumeMountPointA GetSystemTimeAdjustment FindNextFileW EnumResourceTypesW FindResourceExA AddVectoredExceptionHandler BeginUpdateResourceA GetConsoleTitleW SetCommTimeouts GetCPInfoExA EnumResourceTypesA GetModuleFileNameA IsBadHugeWritePtr GetConsoleAliasExesLengthA WriteConsoleA EnumCalendarInfoExW LoadLibraryW DeleteFileW SearchPathW VirtualAlloc WriteConsoleOutputCharacterW GetConsoleAliasA GetShortPathNameA GetModuleHandleA GlobalGetAtomNameA GetPrivateProfileStringW GetProcAddress GetFileType FillConsoleOutputCharacterA GetTimeZoneInformation SetCalendarInfoW SetComputerNameW GetFileAttributesW FindFirstChangeNotificationW GetVolumePathNameW FindFirstChangeNotificationA GetFileAttributesExW SetFileShortNameW DeleteFileA GetVolumeInformationA AddAtomA GetProfileIntA SetFileAttributesA AllocConsole SetConsoleTextAttribute CreateMutexA GetBinaryTypeW GetLongPathNameA FoldStringW FindNextFileA OpenWaitableTimerW ResetEvent GlobalWire GetComputerNameA GetVersionExW VirtualProtect GlobalAlloc GetSystemDefaultLCID GetLastError GetGeoInfoA PeekConsoleInputA LoadLibraryA InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetStartupInfoW HeapFree HeapAlloc GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId SetHandleCount GetStdHandle GetStartupInfoA ExitProcess WriteFile GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode ReadFile InitializeCriticalSectionAndSpinCount LCMapStringA LCMapStringW SetStdHandle GetConsoleOutputCP WriteConsoleW FlushFileBuffers CreateFileA CloseHandle

gdi32

GetCharWidthFloatW

ole32

OleQueryLinkFromData

Sharing

General

Malware Config

Signatures

File Explorer

2025-06-04_7c21ec4d83774d3e21f423888226e8f8_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee

kernel32

gdi32

ole32

generic