2025-07-19_bb490811f4e3349274d2726d12297fd8_amadey_elex_plugx_rhadamanthys_smoke-loader_stop

General

Target
2025-07-19_bb490811f4e3349274d2726d12297fd8_amadey_elex_plugx_rhadamanthys_smoke-loader_stop
Size 241KB
Sample250719-dnmdjsgk7x
SHA256 2836984cde456e8041380e63a7dbeca99edb4a7e0aa93533d2ed8c66f12056ec
MD5 bb490811f4e3349274d2726d12297fd8
SHA1 9edb8039662395df7256ff42037bb0d01bd5d41a
SHA512 01c38cd646336887b870a96aeb33b270cc78a6925712f7c6466617f85ebbd4ed9226a4caca53d3892d735f63b3be0f9e2ed434f2898bb85f77b0402fb5c9db66
SSDEEP 6144:qbN28H3/KsiCHH0FOrKN4rl71Lg/2sUl2zonoLueXUz:qJX4OWN4BG/I2zooLX
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2025-07-19_bb490811f4e3349274d2726d12297fd8_amadey_elex_plugx_rhadamanthys_smoke-loader_stop

File Explorer

2025-07-19_bb490811f4e3349274d2726d12297fd8_amadey_elex_plugx_rhadamanthys_smoke-loader_stop

.exe 241KB

2025-07-19_bb490811f4e3349274d2726d12297fd8_amadey_elex_plugx_rhadamanthys_smoke-loader_stop

IMPHASH 6d6ea0d83ff399727a42713d82ba4b00
SHA256 2836984cde456e8041380e63a7dbeca99edb4a7e0aa93533d2ed8c66f12056ec
MD5 bb490811f4e3349274d2726d12297fd8
SHA1 9edb8039662395df7256ff42037bb0d01bd5d41a
SHA512 01c38cd646336887b870a96aeb33b270cc78a6925712f7c6466617f85ebbd4ed9226a4caca53d3892d735f63b3be0f9e2ed434f2898bb85f77b0402fb5c9db66
SSDEEP 6144:qbN28H3/KsiCHH0FOrKN4rl71Lg/2sUl2zonoLueXUz:qJX4OWN4BG/I2zooLX
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4676

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

VirtualAlloc VirtualProtect Sleep LCMapStringW LCMapStringA GetStringTypeW GetStringTypeA WideCharToMultiByte GetLocaleInfoA HeapSize RtlUnwind HeapReAlloc GetOEMCP GetACP HeapFree GetVersionExA HeapAlloc GetProcessHeap GetStartupInfoW GetProcAddress GetModuleHandleA ExitProcess WriteFile GetStdHandle GetModuleFileNameA UnhandledExceptionFilter GetModuleFileNameW FreeEnvironmentStringsA MultiByteToWideChar GetEnvironmentStrings FreeEnvironmentStringsW GetLastError GetEnvironmentStringsW GetCommandLineA GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapDestroy HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent LoadLibraryA InitializeCriticalSection GetCPInfo

user32

EndDialog PostQuitMessage EndPaint BeginPaint DefWindowProcW DestroyWindow DialogBoxParamW UpdateWindow ShowWindow CreateWindowExW RegisterClassExW LoadCursorW LoadIconW DispatchMessageW TranslateMessage TranslateAcceleratorW GetMessageW LoadAcceleratorsW LoadStringW MessageBoxA

Sharing

General

Malware Config

Signatures

File Explorer

2025-07-19_bb490811f4e3349274d2726d12297fd8_amadey_elex_plugx_rhadamanthys_smoke-loader_stop

kernel32

user32

generic