2026-07-07_6a97785de23f6218483aba94c7dc3852_elex_rhadamanthys_smoke-loader_wapomi

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-07_6a97785de23f6218483aba94c7dc3852_elex_rhadamanthys_smoke-loader_wapomi
Size 13.7MB
Sample260707-zagrssdz7z
SHA256 46cd08c813b4b1a8539b11086509210461b7b6a3fe95b722ce18a90b5e91cd15
MD5 6a97785de23f6218483aba94c7dc3852
SHA1 bcb4328cbe67f54b461ff8796e2e9990b3be978e
SHA512 3225e58f50bcd869f1e29b6993b5433daa2a83634731387b3e8e784d85823929bc299bc12b600d81e17f19864f8508f79a2bbf26996f3c8b1f48e77a256fc4ca
SSDEEP 196608:gYQnnDbxRXCeeVJGfp/N+AYqyL3TTrbJvvAi80JFCC:gXnDbnyeeVJGfJN+n1r
TLSH
T1F2E6F4AB5B65D6FAC75D2932D493E13F4E3808F3CD153E23E166E909B872793902B181
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-07_6a97785de23f6218483aba94c7dc3852_elex_rhadamanthys_smoke-loader_wapomi

File Explorer

2026-07-07_6a97785de23f6218483aba94c7dc3852_elex_rhadamanthys_smoke-loader_wapomi

.exe 13.7MB

2026-07-07_6a97785de23f6218483aba94c7dc3852_elex_rhadamanthys_smoke-loader_wapomi

IMPHASH 83fa14dca08906691b3ff3778b54b308
SHA256 46cd08c813b4b1a8539b11086509210461b7b6a3fe95b722ce18a90b5e91cd15
MD5 6a97785de23f6218483aba94c7dc3852
SHA1 bcb4328cbe67f54b461ff8796e2e9990b3be978e
SHA512 3225e58f50bcd869f1e29b6993b5433daa2a83634731387b3e8e784d85823929bc299bc12b600d81e17f19864f8508f79a2bbf26996f3c8b1f48e77a256fc4ca
SSDEEP 196608:gYQnnDbxRXCeeVJGfp/N+AYqyL3TTrbJvvAi80JFCC:gXnDbnyeeVJGfJN+n1r
TLSH
T1F2E6F4AB5B65D6FAC75D2932D493E13F4E3808F3CD153E23E166E909B872793902B181
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

18313216

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

winmm

timeEndPeriod timeGetTime timeBeginPeriod timeGetDevCaps

vorbisfile

ov_open_callbacks ov_clear ov_time_total ov_time_tell ov_read ov_info ov_time_seek

ws2_32

recv send closesocket htons inet_addr connect WSAGetLastError WSAStartup WSACleanup socket

eax

ord6

kernel32

VirtualProtect GetOEMCP GetACP IsBadCodePtr IsBadReadPtr GetStringTypeW GetStringTypeA IsValidCodePage IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetCPInfo GetDateFormatA VirtualQuery GetTickCount GetModuleHandleA GetProcAddress LoadLibraryA GetFileSize CloseHandle LocalFree WaitForSingleObjectEx GetOverlappedResult WaitForSingleObject ReleaseSemaphore SetFilePointer GetLastError ReadFile SetLastError CreateFileA ResumeThread SetThreadPriority GetThreadPriority GetCurrentThread CreateThread LocalAlloc CreateSemaphoreA GetDiskFreeSpaceA Sleep QueryPerformanceCounter InterlockedIncrement InterlockedDecrement lstrcpyA lstrcatA lstrlenA DeleteCriticalSection SuspendThread LeaveCriticalSection EnterCriticalSection InitializeCriticalSection MultiByteToWideChar DeleteFileA TerminateThread FindClose FindNextFileA GetFileAttributesA FindFirstFileA FreeLibrary QueryPerformanceFrequency OutputDebugStringA GetLocalTime CreateDirectoryA GetUserDefaultLCID SetStdHandle CreateEventA GetVolumeInformationA GetDriveTypeA GetLogicalDriveStringsA SetErrorMode GlobalMemoryStatus GetVersionExA GetCommandLineA GetFullPathNameA WideCharToMultiByte lstrcmpiA GetSystemInfo IsProcessorFeaturePresent LockResource LoadResource SizeofResource FindResourceA FindResourceW MapViewOfFile CreateFileMappingA CreateFileW UnmapViewOfFile ReleaseMutex CreateMutexA GetCurrentProcessId GetSystemDirectoryA GetModuleFileNameA FreeEnvironmentStringsA UnhandledExceptionFilter IsBadWritePtr VirtualAlloc VirtualFree HeapCreate HeapDestroy GetFileType GetStdHandle SetHandleCount FlushFileBuffers LCMapStringW LCMapStringA WriteFile FatalAppExitA SetUnhandledExceptionFilter HeapSize TlsAlloc TlsGetValue TlsSetValue GetCurrentThreadId TlsFree GetStartupInfoA HeapReAlloc HeapAlloc HeapFree GetSystemTimeAsFileTime GetCurrentProcess TerminateProcess ExitProcess RtlUnwind RaiseException InterlockedExchange FreeEnvironmentStringsW GetEnvironmentStringsW SetConsoleCtrlHandler GetTimeFormatA CompareStringA CompareStringW SetEnvironmentVariableA GetTimeZoneInformation SetEndOfFile GetLocaleInfoW GetCurrentDirectoryA GetSystemDefaultLCID SetCurrentDirectoryA GetEnvironmentStrings

user32

wsprintfA IsIconic GetWindowLongA GetMenu AdjustWindowRectEx SystemParametersInfoA DestroyWindow SetWindowLongA ShowWindow LoadIconA LoadCursorA RegisterClassA ReleaseCapture GetWindowPlacement SetTimer ClipCursor PostQuitMessage SetCursor SetCapture DefWindowProcA MapVirtualKeyA UpdateWindow GetKeyState FindWindowA SetForegroundWindow PeekMessageA DispatchMessageA TranslateMessage GetKeyboardLayout DialogBoxParamA EndDialog GetDlgItem SetFocus SendMessageA SetWindowPos AdjustWindowRect CreateWindowExA ShowCursor GetWindowRect MessageBoxA SetWindowTextA ClientToScreen SetCursorPos GetClientRect

gdi32

DeleteObject

advapi32

RegCloseKey RegCreateKeyExA RegOpenKeyExA RegQueryValueExA RegOpenKeyA RegSetValueExA

ole32

CoCreateInstance CoInitialize CoUninitialize

Name

.text

Size

4.3MB

Virtual Size

4.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

_rwcseg

Size

1KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

301KB

Virtual Size

304KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

256KB

Virtual Size

4.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_TEXT_HA

Size

67KB

Virtual Size

68KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_rwdseg

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.text

Size

6.3MB

Virtual Size

6.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.init

Size

22KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

2.3MB

Virtual Size

2.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.HOODLUM

Size

132KB

Virtual Size

132KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

��uY

Size

16KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-07_6a97785de23f6218483aba94c7dc3852_elex_rhadamanthys_smoke-loader_wapomi

winmm

vorbisfile

ws2_32

eax

kernel32

user32

gdi32

advapi32

ole32

generic