2026-07-06_e05acc4687b8f9a450fa5c9f9df0bbc5_amadey_elex_rhadamanthys_smoke-loader

General

Target
2026-07-06_e05acc4687b8f9a450fa5c9f9df0bbc5_amadey_elex_rhadamanthys_smoke-loader
Size 100KB
Sample260707-ar2e4abv3j
SHA256 f739d1799bf09301cd6b47ac44975c2f065f3a40219cdef632d2223bc5f6423a
MD5 e05acc4687b8f9a450fa5c9f9df0bbc5
SHA1 3e8df64f3742f9659dcbfe5c674a6ccae50b32ad
SHA512 d9a608432fdb43227f323fccd9d940f53fda216b9f50c83056eeb62acff0f8e4b5228f0d6af433228b28b88fabc3221a40a95a2efab475bf0f9ab13c8715c4c8
SSDEEP 1536:uNOPrV7pjXQGvhtfbgOOj/WOedJVjLJ/EwXlTYv75ANqaSlXP9YCdWl:uNM9pNOj4+wXlKzBh9YcWl
TLSH
T129A3CF1638DA9273C85549B408698F029B3BB8059FB186C37FE86D0FAFB13C5A536731
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-06_e05acc4687b8f9a450fa5c9f9df0bbc5_amadey_elex_rhadamanthys_smoke-loader

File Explorer

2026-07-06_e05acc4687b8f9a450fa5c9f9df0bbc5_amadey_elex_rhadamanthys_smoke-loader

.exe 100KB

2026-07-06_e05acc4687b8f9a450fa5c9f9df0bbc5_amadey_elex_rhadamanthys_smoke-loader

IMPHASH 4a941e7ceb7d4d19e02fe5fce96e486e
SHA256 f739d1799bf09301cd6b47ac44975c2f065f3a40219cdef632d2223bc5f6423a
MD5 e05acc4687b8f9a450fa5c9f9df0bbc5
SHA1 3e8df64f3742f9659dcbfe5c674a6ccae50b32ad
SHA512 d9a608432fdb43227f323fccd9d940f53fda216b9f50c83056eeb62acff0f8e4b5228f0d6af433228b28b88fabc3221a40a95a2efab475bf0f9ab13c8715c4c8
SSDEEP 1536:uNOPrV7pjXQGvhtfbgOOj/WOedJVjLJ/EwXlTYv75ANqaSlXP9YCdWl:uNM9pNOj4+wXlKzBh9YcWl
TLSH
T129A3CF1638DA9273C85549B408698F029B3BB8059FB186C37FE86D0FAFB13C5A536731
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

85376

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

SendMessageA MessageBoxA

kernel32

GetFileAttributesW GetCommandLineW CreateEventA GetProcAddress lstrcmpA lstrlenW VirtualFree ResumeThread SetFilePointer ReadFile CreateFileW GetModuleFileNameW SetLastError LoadLibraryA GetModuleHandleA SetUnhandledExceptionFilter WaitForSingleObject Sleep GetLastError ResetEvent CloseHandle TerminateProcess GetCurrentThreadId VirtualAlloc GetStdHandle LocalFree LocalAlloc OutputDebugStringA ExitProcess GetCurrentProcess GetStartupInfoA GetCommandLineA GetVersionExA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection WriteFile GetModuleFileNameA UnhandledExceptionFilter FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsAlloc TlsFree TlsSetValue TlsGetValue HeapDestroy HeapCreate HeapFree HeapAlloc InitializeCriticalSection RtlUnwind HeapReAlloc HeapSize InterlockedExchange VirtualQuery GetACP GetOEMCP GetCPInfo MultiByteToWideChar SetStdHandle QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers VirtualProtect GetSystemInfo

crypt32

CryptMsgGetParam CertFindCertificateInStore CertGetNameStringA CryptDecodeObject CryptQueryObject

advapi32

SetEntriesInAclA FreeSid InitializeSecurityDescriptor SetSecurityDescriptorDacl AllocateAndInitializeSid

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-06_e05acc4687b8f9a450fa5c9f9df0bbc5_amadey_elex_rhadamanthys_smoke-loader

user32

kernel32

crypt32

advapi32

generic