2026-04-15_7e9ca6b3cdc6055f31dcc19e20fece3c_amadey_elex_rhadamanthys_smoke-loader_stop

General

Target
2026-04-15_7e9ca6b3cdc6055f31dcc19e20fece3c_amadey_elex_rhadamanthys_smoke-loader_stop
Size 128KB
Sample260415-2a17jsdv9v
SHA256 5855b311c849e5e707d9d2bc98e4dd2be4ed483482cd0e7083e6a4b569102db6
MD5 7e9ca6b3cdc6055f31dcc19e20fece3c
SHA1 1702616363372594618019232284f9e2d12f958b
SHA512 4d49e860d7d3ca973f7d814b00ff722b0bbd0ea9d794500b60a190f665241218949c7786798443c83586d8eec1b3791f59b0afd6488201020858b4076421b175
SSDEEP 1536:tjX0s1IG9k50g0tHgzaZo50Se8ia7kPd4qIP731J+lx+fSQeWcHmlt3aJtjW79Aa:tTfg0txZ27kPdITzqx+ZAmw67qyRkSJ
TLSH
T175D3D0063893D072D40101B4046B8EF17B7FADE37ABD951FABBDF10E6EB12684966271
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-04-15_7e9ca6b3cdc6055f31dcc19e20fece3c_amadey_elex_rhadamanthys_smoke-loader_stop

File Explorer

2026-04-15_7e9ca6b3cdc6055f31dcc19e20fece3c_amadey_elex_rhadamanthys_smoke-loader_stop

.exe 128KB

2026-04-15_7e9ca6b3cdc6055f31dcc19e20fece3c_amadey_elex_rhadamanthys_smoke-loader_stop

IMPHASH 914bfe5d9a7592d183cbe811a2d982fc
SHA256 5855b311c849e5e707d9d2bc98e4dd2be4ed483482cd0e7083e6a4b569102db6
MD5 7e9ca6b3cdc6055f31dcc19e20fece3c
SHA1 1702616363372594618019232284f9e2d12f958b
SHA512 4d49e860d7d3ca973f7d814b00ff722b0bbd0ea9d794500b60a190f665241218949c7786798443c83586d8eec1b3791f59b0afd6488201020858b4076421b175
SSDEEP 1536:tjX0s1IG9k50g0tHgzaZo50Se8ia7kPd4qIP731J+lx+fSQeWcHmlt3aJtjW79Aa:tTfg0txZ27kPdITzqx+ZAmw67qyRkSJ
TLSH
T175D3D0063893D072D40101B4046B8EF17B7FADE37ABD951FABBDF10E6EB12684966271
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5582

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

msimg32

TransparentBlt

kernel32

FindFirstFileA GetLastError GetProcessTimes ExitProcess GlobalAlloc GetCurrentProcess GetProcessIoCounters TlsSetValue GetStringTypeW GetCommandLineA HeapFree GetVersionExA HeapAlloc GetProcessHeap GetStartupInfoA TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetProcAddress GetModuleHandleA WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection TlsGetValue TlsAlloc TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapDestroy HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection LoadLibraryA InitializeCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage Sleep VirtualAlloc HeapReAlloc RtlUnwind HeapSize MultiByteToWideChar GetLocaleInfoA LCMapStringA LCMapStringW GetStringTypeA

user32

GetDesktopWindow GetClassNameA CreateWindowExA AnyPopup CharPrevA

gdi32

CloseFigure BitBlt StretchBlt

shell32

DragQueryPoint

Sharing

General

Malware Config

Signatures

File Explorer

2026-04-15_7e9ca6b3cdc6055f31dcc19e20fece3c_amadey_elex_rhadamanthys_smoke-loader_stop

msimg32

kernel32

user32

gdi32

shell32

generic