2026-06-30_6f40d1a26fd8918ff3008bdbc2a02885_amadey_elex_manuscrypt_rhadamanthys_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-06-30_6f40d1a26fd8918ff3008bdbc2a02885_amadey_elex_manuscrypt_rhadamanthys_smoke-loader
Size 94KB
Sample260701-e227laes8p
SHA256 75b932e190962372efe6ea7c60ad171874fcb9d908e75da1e67fe79c2af5f036
MD5 6f40d1a26fd8918ff3008bdbc2a02885
SHA1 e80f59569304d794d000dd8efd21d1cb06b306e7
SHA512 7d3e1c6038b010d224fb15e2065332bac0021a736df8123c95dd2aebc0a87a15a3f0e0ad744e357b9cf66d6de2e7bc1f0bcec1e6e61eb340330091554ec038ba
SSDEEP 1536:Sdyql1M7wIIEuti7rEYivykYkpaWj0OocG7mJAm/lGb3Cls:SdV1Z1i3QKqjGCJr/lK
TLSH
T1EF939E127AE180F2C48541BC1A9C8F54AB7BBD1445B9D903EB544A8BEFF22D2D73E316
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-06-30_6f40d1a26fd8918ff3008bdbc2a02885_amadey_elex_manuscrypt_rhadamanthys_smoke-loader

File Explorer

2026-06-30_6f40d1a26fd8918ff3008bdbc2a02885_amadey_elex_manuscrypt_rhadamanthys_smoke-loader

.exe 94KB

2026-06-30_6f40d1a26fd8918ff3008bdbc2a02885_amadey_elex_manuscrypt_rhadamanthys_smoke-loader

IMPHASH d2f8b54b620a14509449dc954d3f2b8b
SHA256 75b932e190962372efe6ea7c60ad171874fcb9d908e75da1e67fe79c2af5f036
MD5 6f40d1a26fd8918ff3008bdbc2a02885
SHA1 e80f59569304d794d000dd8efd21d1cb06b306e7
SHA512 7d3e1c6038b010d224fb15e2065332bac0021a736df8123c95dd2aebc0a87a15a3f0e0ad744e357b9cf66d6de2e7bc1f0bcec1e6e61eb340330091554ec038ba
SSDEEP 1536:Sdyql1M7wIIEuti7rEYivykYkpaWj0OocG7mJAm/lGb3Cls:SdV1Z1i3QKqjGCJr/lK
TLSH
T1EF939E127AE180F2C48541BC1A9C8F54AB7BBD1445B9D903EB544A8BEFF22D2D73E316
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

31524

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

ws2_32

inet_addr gethostbyname WSAStartup gethostname

version

GetFileVersionInfoA VerQueryValueA GetFileVersionInfoSizeA

kernel32

GetCurrentProcessId GlobalAlloc ReadFile GetFileSize CreateFileA WriteFile GetCurrentDirectoryA GetWindowsDirectoryA GetSystemDirectoryA GetTempPathA lstrcatA lstrlenA OpenMutexA lstrcmpiA GetModuleFileNameA UnmapViewOfFile MapViewOfFile CreateFileMappingA GetCommandLineA CreateProcessA GetProcAddress LoadLibraryA GetModuleHandleA OpenEventA CopyFileA DeleteFileA MultiByteToWideChar WideCharToMultiByte OpenProcess VirtualFree lstrcmpA SetFilePointer SetFileAttributesA GetFileAttributesA CreateDirectoryA SetFileTime GetFileTime QueryPerformanceCounter GetTickCount GetCurrentThreadId GetSystemTimeAsFileTime DeviceIoControl GetVolumeInformationA GetDriveTypeA GetLogicalDrives GetVersionExA GetTimeZoneInformation GetSystemDefaultLCID ResumeThread SetPriorityClass GetCurrentProcess GetCurrentThread SetThreadPriority SetEndOfFile GetOEMCP LocalAlloc LocalFree SetEvent CreateMutexA GetLastError CreateEventA GlobalFree CreateThread CloseHandle SetCurrentDirectoryA WaitForSingleObject Sleep VirtualProtect GetSystemInfo LCMapStringA LCMapStringW HeapSize VirtualAlloc GetACP GetLocaleInfoA GetCPInfo GetStringTypeW GetStringTypeA FlushFileBuffers SetStdHandle VirtualQuery InterlockedExchange RtlUnwind InitializeCriticalSection GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings HeapAlloc HeapFree GetStartupInfoA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapDestroy HeapCreate HeapReAlloc SetHandleCount GetStdHandle GetFileType TlsAlloc SetLastError TlsFree TlsSetValue TlsGetValue ExitProcess TerminateProcess UnhandledExceptionFilter FreeEnvironmentStringsA

user32

wsprintfA

advapi32

QueryServiceStatus GetUserNameA ControlService CreateServiceA StartServiceA RegSetValueExA RegOpenKeyExA RegCloseKey OpenSCManagerA OpenServiceA CloseServiceHandle StartServiceCtrlDispatcherA RegisterServiceCtrlHandlerA OpenProcessToken GetTokenInformation AllocateAndInitializeSid EqualSid FreeSid SetServiceStatus

ole32

CoCreateInstance CoInitializeSecurity CoInitializeEx CoUninitialize

wininet

HttpQueryInfoA InternetGetConnectedState InternetOpenA InternetSetCookieA InternetOpenUrlA InternetReadFile InternetCloseHandle

urlmon

ObtainUserAgentString

iphlpapi

GetIpAddrTable GetNetworkParams GetAdaptersInfo GetIfEntry

Sharing

General

Malware Config

Signatures

File Explorer

2026-06-30_6f40d1a26fd8918ff3008bdbc2a02885_amadey_elex_manuscrypt_rhadamanthys_smoke-loader

ws2_32

version

kernel32

user32

advapi32

ole32

wininet

urlmon

iphlpapi

generic