2026-06-28_95da84bf42c48fa9c575307ab0ef0a04_elex_magniber_rhadamanthys_smoke-loader_stop_tofsee

General

Target
2026-06-28_95da84bf42c48fa9c575307ab0ef0a04_elex_magniber_rhadamanthys_smoke-loader_stop_tofsee
Size 227KB
Sample260628-zawkyset5q
SHA256 4a6e67804ee344e228d10c7ea4e869b633ea4337599c8a6fca59b54745150953
MD5 95da84bf42c48fa9c575307ab0ef0a04
SHA1 936f560055d2a4c634af066a7c7e9f0324bbb0cc
SHA512 fe80645e1319f066483e533827ab622af48bbd122cbf689fa9623d99d86c465f20c4ea9024e36dee745c43f1caebae17aea4f9c20756908b62c10ef1423648be
SSDEEP 3072:8qEo7L4ueEp6Bxf3IbgFPJipLg2J5R56AtCw9THbmQ6h6pxMJJgZOiUZBqZSC7ep:zEaLjp6Bybjv5+AhHbmpJJyT7tG
TLSH
T190348D1D30D0C076D01715BA87A0D6B1AA4F74A98F72A9CB6BD60AF94F3D3E1A72530D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-06-28_95da84bf42c48fa9c575307ab0ef0a04_elex_magniber_rhadamanthys_smoke-loader_stop_tofsee

File Explorer

2026-06-28_95da84bf42c48fa9c575307ab0ef0a04_elex_magniber_rhadamanthys_smoke-loader_stop_tofsee

.exe 227KB

2026-06-28_95da84bf42c48fa9c575307ab0ef0a04_elex_magniber_rhadamanthys_smoke-loader_stop_tofsee

IMPHASH 3ef1fb736697f59fb24e23f356e26c4d
SHA256 4a6e67804ee344e228d10c7ea4e869b633ea4337599c8a6fca59b54745150953
MD5 95da84bf42c48fa9c575307ab0ef0a04
SHA1 936f560055d2a4c634af066a7c7e9f0324bbb0cc
SHA512 fe80645e1319f066483e533827ab622af48bbd122cbf689fa9623d99d86c465f20c4ea9024e36dee745c43f1caebae17aea4f9c20756908b62c10ef1423648be
SSDEEP 3072:8qEo7L4ueEp6Bxf3IbgFPJipLg2J5R56AtCw9THbmQ6h6pxMJJgZOiUZBqZSC7ep:zEaLjp6Bybjv5+AhHbmpJJyT7tG
TLSH
T190348D1D30D0C076D01715BA87A0D6B1AA4F74A98F72A9CB6BD60AF94F3D3E1A72530D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

123108

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GlobalMemoryStatus lstrlenA GetCPInfo LocalCompact LocalFlags GetSystemTimes GlobalAlloc AddVectoredContinueHandler LoadLibraryW TerminateThread GetLastError GetProcAddress VirtualAllocEx AddVectoredExceptionHandler GetExitCodeThread FindAtomA OutputDebugStringA GetFileInformationByHandle CompareStringW CompareStringA GetTimeZoneInformation LCMapStringW LCMapStringA GetStringTypeW GetStringTypeA IsValidLocale EnumSystemLocalesA GetUserDefaultLCID GetDateFormatA GetTimeFormatA GetLocaleInfoA GetStartupInfoW RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapFree EnterCriticalSection LeaveCriticalSection CloseHandle GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement GetCurrentThread HeapCreate HeapDestroy VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime FatalAppExitA VirtualAlloc HeapReAlloc CreateFileA InitializeCriticalSectionAndSpinCount SetStdHandle WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers HeapSize SetConsoleCtrlHandler FreeLibrary InterlockedExchange LoadLibraryA GetACP GetOEMCP IsValidCodePage SetFilePointer SetEndOfFile GetProcessHeap MultiByteToWideChar ReadFile WriteConsoleA GetConsoleOutputCP WriteConsoleW GetLocaleInfoW SetEnvironmentVariableA

user32

AnimateWindow IsCharLowerA CharPrevA ShowWindow GetActiveWindow WindowFromDC FindWindowA GetMonitorInfoW GetDCEx

shell32

DragQueryPoint DragQueryFileA

Sharing

General

Malware Config

Signatures

File Explorer

2026-06-28_95da84bf42c48fa9c575307ab0ef0a04_elex_magniber_rhadamanthys_smoke-loader_stop_tofsee

kernel32

user32

shell32

generic