2026-05-28_6757073963b2a293ab6cb94f820df540_elex_magniber_rhadamanthys_smoke-loader_stop_tofsee

General

Target
2026-05-28_6757073963b2a293ab6cb94f820df540_elex_magniber_rhadamanthys_smoke-loader_stop_tofsee
Size 226KB
Sample260528-qn4daagy6k
SHA256 0a77c35ae35154e8351cf66c108ea3a1e4f7079b33da0fa202ac0525bb9780fe
MD5 6757073963b2a293ab6cb94f820df540
SHA1 73d3ec4c9ec0645a1b6b36c6714901a8ec1c1174
SHA512 b604462eac4a8aaaddb2876b21b22609561db59518bcb8140ed771de6cd94fb6e816e4672db5b485bf78026f03b47243b4d0774d7cb8efbbcd44ae247e03b10d
SSDEEP 3072:SMiDLXlL84l8jLANJiZmT6Rp5sjRakikR8PTZ0rt45DYXQKmdv3oeUuQIzL:JiDLXvujLfRwDDRCRYA1V
TLSH
T1AD346A6936C6D072D1A2307A0952DBB059AEF4210F695ACFBFD906363F306D5B372386
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-05-28_6757073963b2a293ab6cb94f820df540_elex_magniber_rhadamanthys_smoke-loader_stop_tofsee

File Explorer

2026-05-28_6757073963b2a293ab6cb94f820df540_elex_magniber_rhadamanthys_smoke-loader_stop_tofsee

.exe 226KB

2026-05-28_6757073963b2a293ab6cb94f820df540_elex_magniber_rhadamanthys_smoke-loader_stop_tofsee

IMPHASH e1addd52065e05b88dc6e5d0e9798033
SHA256 0a77c35ae35154e8351cf66c108ea3a1e4f7079b33da0fa202ac0525bb9780fe
MD5 6757073963b2a293ab6cb94f820df540
SHA1 73d3ec4c9ec0645a1b6b36c6714901a8ec1c1174
SHA512 b604462eac4a8aaaddb2876b21b22609561db59518bcb8140ed771de6cd94fb6e816e4672db5b485bf78026f03b47243b4d0774d7cb8efbbcd44ae247e03b10d
SSDEEP 3072:SMiDLXlL84l8jLANJiZmT6Rp5sjRakikR8PTZ0rt45DYXQKmdv3oeUuQIzL:JiDLXvujLfRwDDRCRYA1V
TLSH
T1AD346A6936C6D072D1A2307A0952DBB059AEF4210F695ACFBFD906363F306D5B372386
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

12424

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW TerminateThread TerminateProcess GetMailslotInfo ExitThread GetProcAddress GlobalAlloc OutputDebugStringA CompareStringW CompareStringA GetTimeZoneInformation LCMapStringW LCMapStringA GetSystemTimes GetCPInfo AddAtomW GlobalMemoryStatus GetStartupInfoW RaiseException RtlUnwind GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc GetLastError HeapFree WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode EnterCriticalSection LeaveCriticalSection GetModuleHandleW Sleep ExitProcess GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement GetCurrentThread HeapCreate HeapDestroy VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime FatalAppExitA VirtualAlloc HeapReAlloc SetFilePointer WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar SetStdHandle FlushFileBuffers HeapSize SetConsoleCtrlHandler FreeLibrary InterlockedExchange LoadLibraryA InitializeCriticalSectionAndSpinCount GetACP GetOEMCP IsValidCodePage CreateFileA CloseHandle GetLocaleInfoW GetLocaleInfoA GetTimeFormatA GetDateFormatA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale GetStringTypeA GetStringTypeW SetEnvironmentVariableA

user32

ShowWindow FindWindowA GetMonitorInfoW GetDC

gdi32

FlattenPath GetGraphicsMode BeginPath

Sharing

General

Malware Config

Signatures

File Explorer

2026-05-28_6757073963b2a293ab6cb94f820df540_elex_magniber_rhadamanthys_smoke-loader_stop_tofsee

kernel32

user32

gdi32

generic