2026-04-17_7376c97b2b9d6c70d4242b30ff8991eb_amadey_elex_karagany_rhadamanthys_smoke-loader

General

Target
2026-04-17_7376c97b2b9d6c70d4242b30ff8991eb_amadey_elex_karagany_rhadamanthys_smoke-loader
Size 5.5MB
Sample260417-eelw4aew8l
SHA256 d7fba593d337d64d7666419ae68b25f3b7c6ea21ea8ed3b0ad90980791673533
MD5 7376c97b2b9d6c70d4242b30ff8991eb
SHA1 99874ec9bf306633eb8aa8af2855229aa0c385dd
SHA512 21d0f6beeb67d83ecd827e829f53e68ceaf38d299ce07b8535f76cde8c35b873102ec5d1450b47901bf839f13261e4f0f9223cca65d4723b9576fca53bb8a7a0
SSDEEP 98304:YzhAmhZp6+Wvl3D1tBpzOUV3m+hVGiqhx0RHbNvR5D1toKOQ5MpIcRnVKN1fD:YNrLclppiUFm+X1v7lD1tZOBFVK3fD
TLSH
T1DA4633AEB0904C25DC5A5AB0D73E03F351EE8D24472EDD6AE8E484E52FD05E1AF381B5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-04-17_7376c97b2b9d6c70d4242b30ff8991eb_amadey_elex_karagany_rhadamanthys_smoke-loader

File Explorer

2026-04-17_7376c97b2b9d6c70d4242b30ff8991eb_amadey_elex_karagany_rhadamanthys_smoke-loader

.exe 5.5MB

2026-04-17_7376c97b2b9d6c70d4242b30ff8991eb_amadey_elex_karagany_rhadamanthys_smoke-loader

IMPHASH ab48de9810f4cbcfaca67b96ba2cfc48
SHA256 d7fba593d337d64d7666419ae68b25f3b7c6ea21ea8ed3b0ad90980791673533
MD5 7376c97b2b9d6c70d4242b30ff8991eb
SHA1 99874ec9bf306633eb8aa8af2855229aa0c385dd
SHA512 21d0f6beeb67d83ecd827e829f53e68ceaf38d299ce07b8535f76cde8c35b873102ec5d1450b47901bf839f13261e4f0f9223cca65d4723b9576fca53bb8a7a0
SSDEEP 98304:YzhAmhZp6+Wvl3D1tBpzOUV3m+hVGiqhx0RHbNvR5D1toKOQ5MpIcRnVKN1fD:YNrLclppiUFm+X1v7lD1tZOBFVK3fD
TLSH
T1DA4633AEB0904C25DC5A5AB0D73E03F351EE8D24472EDD6AE8E484E52FD05E1AF381B5
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

21789

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetProcAddress LoadLibraryA VirtualAlloc GetLastError SizeofResource LockResource LoadResource FindResourceW FindResourceExW GetEnvironmentVariableW WideCharToMultiByte lstrlenW MultiByteToWideChar lstrlenA CloseHandle WriteFile CreateFileW CreateProcessW GetModuleHandleW ReadFile GetFileSize GetTempFileNameW GetTempPathW SetEnvironmentVariableW GetModuleFileNameW DeleteFileW GetCommandLineW HeapSetInformation GetStartupInfoW HeapFree RaiseException GetSystemTimeAsFileTime RtlUnwind SetUnhandledExceptionFilter ExitProcess DecodePointer GetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate HeapDestroy QueryPerformanceCounter GetTickCount GetCurrentProcessId IsProcessorFeaturePresent TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapReAlloc HeapSize EnterCriticalSection LeaveCriticalSection FreeLibrary InterlockedExchange LoadLibraryW Sleep GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringW GetStringTypeW GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer WriteConsoleW SetStdHandle GetProcessHeap LocalAlloc

shell32

ShellExecuteW

Sharing

General

Malware Config

Signatures

File Explorer

2026-04-17_7376c97b2b9d6c70d4242b30ff8991eb_amadey_elex_karagany_rhadamanthys_smoke-loader

kernel32

shell32

generic