2026-05-11_8945a5d2889804b6dac7f203b6ea66e9_rhadamanthys_smoke-loader_stop

General

Target
2026-05-11_8945a5d2889804b6dac7f203b6ea66e9_rhadamanthys_smoke-loader_stop
Size 313KB
Sample260511-bsd7macw6j
SHA256 69ee125ed07ca93c7b65ee00073ecc97cb55ea6a728ab9e2df5a6910802ffbe2
MD5 8945a5d2889804b6dac7f203b6ea66e9
SHA1 dd1f4d037f4e36764546c2544f88c06cd2c6a947
SHA512 88e10de176147f0aff9ac1790807a76b963aa5846bf7570e3e77870d20b564762413d74b77faf839468293b1d6536da5ea685722cbfb847a0e090e1057479b81
SSDEEP 6144:exdOTrlISJWLsG7weALApmpt/pPDipzyZqFkfnyQL:adOTr6/LsGmLAw3wpGXfzL
TLSH
T16664BF563889C368E20364BB88D5C35D60B4BD2B3F764CA3B5E7BF0ECE305C91569689
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-05-11_8945a5d2889804b6dac7f203b6ea66e9_rhadamanthys_smoke-loader_stop

File Explorer

2026-05-11_8945a5d2889804b6dac7f203b6ea66e9_rhadamanthys_smoke-loader_stop

.exe 313KB

2026-05-11_8945a5d2889804b6dac7f203b6ea66e9_rhadamanthys_smoke-loader_stop

IMPHASH b2f09b18a8122da73e45991eb7801770
SHA256 69ee125ed07ca93c7b65ee00073ecc97cb55ea6a728ab9e2df5a6910802ffbe2
MD5 8945a5d2889804b6dac7f203b6ea66e9
SHA1 dd1f4d037f4e36764546c2544f88c06cd2c6a947
SHA512 88e10de176147f0aff9ac1790807a76b963aa5846bf7570e3e77870d20b564762413d74b77faf839468293b1d6536da5ea685722cbfb847a0e090e1057479b81
SSDEEP 6144:exdOTrlISJWLsG7weALApmpt/pPDipzyZqFkfnyQL:adOTr6/LsGmLAw3wpGXfzL
TLSH
T16664BF563889C368E20364BB88D5C35D60B4BD2B3F764CA3B5E7BF0ECE305C91569689
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

11879

Magic Number

267

Subsystem

MAGE_SUBSYSTEM_UNKNOWN

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

CreateDialogParamA CloseWindow ChangeDisplaySettingsA BeginPaint AppendMenuA wsprintfA SetRect

kernel32

TlsSetValue CreateFileA CloseHandle HeapSize MapUserPhysicalPages MapViewOfFile LoadLibraryW FreeLibrary GetCurrentProcess GetVersionExA GetPrivateProfileStringW GetModuleHandleA GetProcAddress MultiByteToWideChar FormatMessageA DeleteFileW CreateFileW SetFilePointer WideCharToMultiByte lstrlenA WriteFile GetSystemTimeAsFileTime GetLastError HeapReAlloc HeapAlloc GetCommandLineA HeapFree GetProcessHeap GetStartupInfoA EnterCriticalSection LeaveCriticalSection TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent DeleteCriticalSection HeapDestroy HeapCreate VirtualFree VirtualAlloc GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP TlsGetValue TlsAlloc TlsFree SetLastError GetCurrentThreadId ExitProcess GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId Sleep RtlUnwind InitializeCriticalSection LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode LoadLibraryA FlushFileBuffers ReadFile RaiseException SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW

Sharing

General

Malware Config

Signatures

File Explorer

2026-05-11_8945a5d2889804b6dac7f203b6ea66e9_rhadamanthys_smoke-loader_stop

user32

kernel32

generic