2026-07-02_4da5d266da4cb8fa8ec175fbec44bc9e_amadey_elex_rhadamanthys_smoke-loader

General

Target
2026-07-02_4da5d266da4cb8fa8ec175fbec44bc9e_amadey_elex_rhadamanthys_smoke-loader
Size 71KB
Sample260702-2s34vsf151
SHA256 4e5f07244e285a8cf962363f6e72a58d3c303462e77269ead76dd2ff1d009c07
MD5 4da5d266da4cb8fa8ec175fbec44bc9e
SHA1 badfcb1bd140b6cf2914d08987b32f6ad2795301
SHA512 9260c74c24459c6e70145d9da6827ce29caaa881e955a320a661ee861d3bd5c7f261490646eea19bee873f5ca4ffe93fdd9f45adf2cd73f9b2a9a2c729527986
SSDEEP 1536:9jHZ2rfOTrOUkThe9dCmbNoLmcYXV/O16nvaHW:POOTv9dCmbCLmcYXVlnvk
TLSH
T1CE634A03B390C8B2F46356740879DA215A5BBC55A2B4918F378C726EAFB13825DFA317
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-02_4da5d266da4cb8fa8ec175fbec44bc9e_amadey_elex_rhadamanthys_smoke-loader

File Explorer

2026-07-02_4da5d266da4cb8fa8ec175fbec44bc9e_amadey_elex_rhadamanthys_smoke-loader

.exe 71KB

2026-07-02_4da5d266da4cb8fa8ec175fbec44bc9e_amadey_elex_rhadamanthys_smoke-loader

IMPHASH 9f4c6542128fba942a3b092c3a5337cf
SHA256 4e5f07244e285a8cf962363f6e72a58d3c303462e77269ead76dd2ff1d009c07
MD5 4da5d266da4cb8fa8ec175fbec44bc9e
SHA1 badfcb1bd140b6cf2914d08987b32f6ad2795301
SHA512 9260c74c24459c6e70145d9da6827ce29caaa881e955a320a661ee861d3bd5c7f261490646eea19bee873f5ca4ffe93fdd9f45adf2cd73f9b2a9a2c729527986
SSDEEP 1536:9jHZ2rfOTrOUkThe9dCmbNoLmcYXV/O16nvaHW:POOTv9dCmbCLmcYXVlnvk
TLSH
T1CE634A03B390C8B2F46356740879DA215A5BBC55A2B4918F378C726EAFB13825DFA317
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

12181

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

EndDialog SetWindowTextW SendMessageW DestroyWindow DialogBoxParamW DefWindowProcW BeginPaint EndPaint PostQuitMessage CreateWindowExW LoadStringW LoadIconW LoadCursorW LoadAcceleratorsW RegisterClassExW GetMessageW TranslateAcceleratorW TranslateMessage DispatchMessageW

kernel32

IsProcessorFeaturePresent HeapReAlloc GetStringTypeW MultiByteToWideChar LCMapStringW HeapSize RtlUnwind IsValidCodePage GetOEMCP GetACP GetCPInfo GetCurrentProcess TerminateProcess IsDebuggerPresent UnhandledExceptionFilter ReleaseMutex CreateMutexW TerminateThread CreateThread WaitForSingleObject GlobalAlloc FindNextFileW Sleep CreateDirectoryW FindFirstFileW FindClose LoadLibraryA GetModuleHandleW lstrlenW lstrcpynW GetLastError LoadLibraryW GlobalSize GetModuleFileNameA GetCommandLineA HeapSetInformation GetStartupInfoW SetUnhandledExceptionFilter GetProcAddress ExitProcess DecodePointer WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapFree HeapAlloc RaiseException LeaveCriticalSection EnterCriticalSection

gdi32

TextOutW

comctl32

ord17

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-02_4da5d266da4cb8fa8ec175fbec44bc9e_amadey_elex_rhadamanthys_smoke-loader

user32

kernel32

gdi32

comctl32

generic