2026-06-28_dc66059291df03c18e2ab6feb676f4f4_elex_nymaim_rhadamanthys_smoke-loader

General

Target
2026-06-28_dc66059291df03c18e2ab6feb676f4f4_elex_nymaim_rhadamanthys_smoke-loader
Size 3.9MB
Sample260628-w9cekscs4k
SHA256 4bfa10e52b17a93f9041fa7065d65f6c860f51bcd8c33afd9262fcd4a13c4e9d
MD5 dc66059291df03c18e2ab6feb676f4f4
SHA1 5e3f13fc58bd2d6bc1b110701397263f43e78681
SHA512 d00dd38102c207410b5fbaced573c606439a431f7cad81ac4fe35bb2e1cec598dfeabab0883cd79d4a1162119e973ee38a691c210da9e10fab042f5d604cb26d
SSDEEP 98304:hiMDtIXLr06AdfEThF35Pzue1adAz0s0ZTklzgOjuRUmWPnJo/0LLnEBK:hermEdF37aMZLuabLLnEBK
TLSH
T16016E131B691C079C2633631C6CA93B9A2AABE305E75128756D13E3D7F704C3692C76B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-06-28_dc66059291df03c18e2ab6feb676f4f4_elex_nymaim_rhadamanthys_smoke-loader

File Explorer

2026-06-28_dc66059291df03c18e2ab6feb676f4f4_elex_nymaim_rhadamanthys_smoke-loader

.exe 3.9MB

2026-06-28_dc66059291df03c18e2ab6feb676f4f4_elex_nymaim_rhadamanthys_smoke-loader

IMPHASH 26db5052cd8ede8ee590a842731769c5
SHA256 4bfa10e52b17a93f9041fa7065d65f6c860f51bcd8c33afd9262fcd4a13c4e9d
MD5 dc66059291df03c18e2ab6feb676f4f4
SHA1 5e3f13fc58bd2d6bc1b110701397263f43e78681
SHA512 d00dd38102c207410b5fbaced573c606439a431f7cad81ac4fe35bb2e1cec598dfeabab0883cd79d4a1162119e973ee38a691c210da9e10fab042f5d604cb26d
SSDEEP 98304:hiMDtIXLr06AdfEThF35Pzue1adAz0s0ZTklzgOjuRUmWPnJo/0LLnEBK:hermEdF37aMZLuabLLnEBK
TLSH
T16016E131B691C079C2633631C6CA93B9A2AABE305E75128756D13E3D7F704C3692C76B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

15171

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateFileA LockResource LoadResource SizeofResource FindResourceA WideCharToMultiByte MultiByteToWideChar WriteFile DeleteFileA CreateDirectoryA GetProcAddress LoadLibraryA lstrcatA GetSystemTime GetModuleHandleA GetModuleFileNameA GetTempPathA GetFileSize WaitForSingleObject ResumeThread SetThreadPriority CreateThread GetStringTypeA LCMapStringW LCMapStringA SetEndOfFile GetOEMCP GetACP GetCPInfo IsBadCodePtr IsBadReadPtr FlushFileBuffers SetStdHandle SetUnhandledExceptionFilter GetComputerNameA CloseHandle GetFileType GetStdHandle HeapAlloc RtlUnwind GetStartupInfoA GetCommandLineA GetVersion ExitProcess HeapFree RaiseException GetLastError HeapDestroy HeapCreate VirtualFree VirtualAlloc HeapReAlloc IsBadWritePtr ReadFile TerminateProcess GetCurrentProcess SetFilePointer HeapSize UnhandledExceptionFilter FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW SetHandleCount GetStringTypeW

user32

DefWindowProcA PostQuitMessage DestroyWindow CreateWindowExA ShowWindow GetMessageA TranslateMessage DispatchMessageA GetDesktopWindow RegisterClassExA

shell32

SHGetSpecialFolderPathA

advapi32

GetUserNameA

shlwapi

PathFileExistsA

Sharing

General

Malware Config

Signatures

File Explorer

2026-06-28_dc66059291df03c18e2ab6feb676f4f4_elex_nymaim_rhadamanthys_smoke-loader

kernel32

user32

shell32

advapi32

shlwapi

generic