2026-04-19_24f2dc117fb474be2263c4d3b5b79def_amadey_elex_maze_rhadamanthys_smoke-loader

General

Target
2026-04-19_24f2dc117fb474be2263c4d3b5b79def_amadey_elex_maze_rhadamanthys_smoke-loader
Size 2.8MB
Sample260419-n495naev21
SHA256 033eff82fd949fb6a50650a0afbb46dbb4a06c8eebe4f04ce5ad6c3b1009db8a
MD5 24f2dc117fb474be2263c4d3b5b79def
SHA1 f2d91863db486c020e64e656ef7e81e93741a17f
SHA512 cad91e85dd6fad41e9e49f836d844f1e2aca3221c2c61c7f5d8bcb99213d644b2159c671141a4335a000f5374d67ba836b448f20f040acf3cec525baae5d6d6b
SSDEEP 24576:uWvWL0vbxSIa5jcAkSYqyEid4KplkfOm3FolSjyb:hA0vb7ApYqCXpUneb
TLSH
T182D5F701B6604931D462C2758592EA9D96333D54EB334F8F22C67EEEFFF27825926231
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-04-19_24f2dc117fb474be2263c4d3b5b79def_amadey_elex_maze_rhadamanthys_smoke-loader

File Explorer

2026-04-19_24f2dc117fb474be2263c4d3b5b79def_amadey_elex_maze_rhadamanthys_smoke-loader

.exe 2.8MB

2026-04-19_24f2dc117fb474be2263c4d3b5b79def_amadey_elex_maze_rhadamanthys_smoke-loader

IMPHASH 75e7fb7458b2e2dd8c3b4d1f0020fc10
SHA256 033eff82fd949fb6a50650a0afbb46dbb4a06c8eebe4f04ce5ad6c3b1009db8a
MD5 24f2dc117fb474be2263c4d3b5b79def
SHA1 f2d91863db486c020e64e656ef7e81e93741a17f
SHA512 cad91e85dd6fad41e9e49f836d844f1e2aca3221c2c61c7f5d8bcb99213d644b2159c671141a4335a000f5374d67ba836b448f20f040acf3cec525baae5d6d6b
SSDEEP 24576:uWvWL0vbxSIa5jcAkSYqyEid4KplkfOm3FolSjyb:hA0vb7ApYqCXpUneb
TLSH
T182D5F701B6604931D462C2758592EA9D96333D54EB334F8F22C67EEEFFF27825926231
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

9451

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

c:\builds\moz2_slave\rel-m-rel-w32_bld-000000000000\build\obj-firefox\browser\app\firefox.pdb

kernel32

GetEnvironmentVariableW GetProcessIoCounters FreeLibrary SetDllDirectoryW VerSetConditionMask GetCurrentProcess SetEnvironmentVariableW GetModuleHandleW WideCharToMultiByte LoadLibraryW GetFileAttributesW VerifyVersionInfoA GetModuleFileNameW MultiByteToWideChar FlushInstructionCache GetProcAddress VirtualProtectEx VirtualAllocEx GetModuleHandleA LoadLibraryExA ExpandEnvironmentStringsW LoadLibraryExW SetFilePointerEx ReadFile CreateFileW CloseHandle IsDebuggerPresent RaiseException GetLastError GetCommandLineW EncodePointer DecodePointer IsProcessorFeaturePresent EnterCriticalSection LeaveCriticalSection SetLastError GetCurrentThreadId ExitProcess GetModuleHandleExW GetProcessHeap GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW WriteFile QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW IsValidCodePage GetACP GetOEMCP GetCPInfo HeapSize RtlUnwind HeapFree UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree HeapAlloc SetStdHandle OutputDebugStringW GetStringTypeW CompareStringW LCMapStringW GetConsoleCP GetConsoleMode HeapReAlloc SetEnvironmentVariableA ReadConsoleW FlushFileBuffers WriteConsoleW SetEndOfFile

Sharing

General

Malware Config

Signatures

File Explorer

2026-04-19_24f2dc117fb474be2263c4d3b5b79def_amadey_elex_maze_rhadamanthys_smoke-loader

kernel32

generic