2025-06-04_b5d7ee56234fc543a6c0c3a49f3c4cdb_amadey_elex_rhadamanthys_smoke-loader_stop

General

Target
2025-06-04_b5d7ee56234fc543a6c0c3a49f3c4cdb_amadey_elex_rhadamanthys_smoke-loader_stop
Size 273KB
Sample250604-2gcsjaxtcx
SHA256 8016f0ead5182d8865e7cb7626aeb177cddd6f38509c90ef96e83cd46bbdee96
MD5 b5d7ee56234fc543a6c0c3a49f3c4cdb
SHA1 3658707db7464eb76cddecacb133c95e53c39a05
SHA512 ed6091c31993304c328e3c8efe36de68e085708e18cf6821ac0bae751ee14d93f69831cf5889dd32409d113f49c0c7334606eb006bd39e81219d251ffc5d7cd5
SSDEEP 6144:EOGB+z7q6JfAsonIBTUZVH2KHXCYrwVfXQ:EdKfAson8UZfHXCY
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2025-06-04_b5d7ee56234fc543a6c0c3a49f3c4cdb_amadey_elex_rhadamanthys_smoke-loader_stop

File Explorer

2025-06-04_b5d7ee56234fc543a6c0c3a49f3c4cdb_amadey_elex_rhadamanthys_smoke-loader_stop

.exe 273KB

2025-06-04_b5d7ee56234fc543a6c0c3a49f3c4cdb_amadey_elex_rhadamanthys_smoke-loader_stop

IMPHASH 9b42896b222b9e79ad310b3f1bed70e0
SHA256 8016f0ead5182d8865e7cb7626aeb177cddd6f38509c90ef96e83cd46bbdee96
MD5 b5d7ee56234fc543a6c0c3a49f3c4cdb
SHA1 3658707db7464eb76cddecacb133c95e53c39a05
SHA512 ed6091c31993304c328e3c8efe36de68e085708e18cf6821ac0bae751ee14d93f69831cf5889dd32409d113f49c0c7334606eb006bd39e81219d251ffc5d7cd5
SSDEEP 6144:EOGB+z7q6JfAsonIBTUZVH2KHXCYrwVfXQ:EdKfAson8UZfHXCY
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

29408

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\doro 12_lob_vobu.pdb

kernel32

HeapFree SetVolumeMountPointW GetSystemDefaultLCID EnumCalendarInfoExW GetPrivateProfileStringW EnumResourceTypesA GetVolumePathNameW SetFileShortNameW LoadLibraryW ReadConsoleInputA CreateEventA GetConsoleAliasExesLengthW GetSystemTimeAdjustment GetVersionExW GetFileAttributesA GetConsoleAliasW WriteConsoleW GetBinaryTypeA GetGeoInfoA GetTimeZoneInformation WritePrivateProfileStringW GetLastError GetProcAddress GetLongPathNameA VirtualAlloc PeekConsoleInputW CreateTimerQueueTimer WaitNamedPipeA GlobalGetAtomNameA SearchPathA LoadLibraryA WriteConsoleA InterlockedExchangeAdd OpenWaitableTimerW LocalAlloc SetCalendarInfoW AddVectoredExceptionHandler AddAtomW FoldStringW GlobalWire FindNextFileA GetModuleHandleA CreateMutexA FindNextFileW VirtualProtect GetFileAttributesExW GetShortPathNameW GetCPInfoExA SetFileShortNameA EnumResourceLanguagesW GetFileInformationByHandle SetFileAttributesW DeleteFileA FindResourceExW SetConsoleTextAttribute IsBadHugeReadPtr SetComputerNameA FindFirstChangeNotificationW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA RaiseException RtlUnwind HeapAlloc EnterCriticalSection LeaveCriticalSection GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement SetHandleCount GetStdHandle GetFileType DeleteCriticalSection Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc CloseHandle CreateFileA InitializeCriticalSectionAndSpinCount ReadFile HeapSize SetStdHandle GetConsoleOutputCP MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers SetEndOfFile GetProcessHeap

gdi32

GetCharWidthFloatA

advapi32

DeregisterEventSource CloseEventLog

Sharing

General

Malware Config

Signatures

File Explorer

2025-06-04_b5d7ee56234fc543a6c0c3a49f3c4cdb_amadey_elex_rhadamanthys_smoke-loader_stop

kernel32

gdi32

advapi32

generic