2026-07-19_614432e8f34070f9ceae633ad3a98a65_amadey_elex_rhadamanthys_smoke-loader_stop

General

Target
2026-07-19_614432e8f34070f9ceae633ad3a98a65_amadey_elex_rhadamanthys_smoke-loader_stop
Size 40.0MB
Sample260719-2cs9qagz3x
SHA256 d914e3617c2e87d9cdf849a966390df0a0d6e93765ddb96de226aeb11583ee07
MD5 614432e8f34070f9ceae633ad3a98a65
SHA1 3184f85ebb8db2dc495be480e37f031524e16570
SHA512 68a26229f9e031912c9d66bea22acdab665bfe1d2c179c3f7a69c9492f915f6578069cef81b227f82ba34c7a77431c388a0b658ce411ff0596719f9fea1f7ad4
SSDEEP 786432:7pGoHCbrFwMp9H25FtfGhJ4wNvMpZzSPwjs9jNdpS1o0K:7PinmMeQhJhCV49hG1o
TLSH
T1A597330873EFE493F52FAC32542552C2EB99D69A1534C2F70D4AAF8857BBE210F7A114
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-19_614432e8f34070f9ceae633ad3a98a65_amadey_elex_rhadamanthys_smoke-loader_stop

File Explorer

2026-07-19_614432e8f34070f9ceae633ad3a98a65_amadey_elex_rhadamanthys_smoke-loader_stop

.exe 40.0MB

2026-07-19_614432e8f34070f9ceae633ad3a98a65_amadey_elex_rhadamanthys_smoke-loader_stop

IMPHASH c8e2e71ad4038bb5a9afcfbf0dd6003b
SHA256 d914e3617c2e87d9cdf849a966390df0a0d6e93765ddb96de226aeb11583ee07
MD5 614432e8f34070f9ceae633ad3a98a65
SHA1 3184f85ebb8db2dc495be480e37f031524e16570
SHA512 68a26229f9e031912c9d66bea22acdab665bfe1d2c179c3f7a69c9492f915f6578069cef81b227f82ba34c7a77431c388a0b658ce411ff0596719f9fea1f7ad4
SSDEEP 786432:7pGoHCbrFwMp9H25FtfGhJ4wNvMpZzSPwjs9jNdpS1o0K:7PinmMeQhJhCV49hG1o
TLSH
T1A597330873EFE493F52FAC32542552C2EB99D69A1534C2F70D4AAF8857BBE210F7A114
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

41981781

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

d:\BWA\QuickTimeWinPackageData_Final-824\srcroot\setup\setup.pdb

msi

ord112

kernel32

SetEndOfFile LocalAlloc LocalFree SizeofResource LockResource LoadResource FindResourceA GetModuleFileNameA FreeResource SetFileAttributesA CloseHandle SetFileTime LocalFileTimeToFileTime DosDateTimeToFileTime CreateFileA RemoveDirectoryA DeleteFileA GetExitCodeProcess WaitForSingleObject CreateProcessA SetProcessWorkingSetSize GetCurrentProcess GetSystemDirectoryA CreateDirectoryA GetTickCount GetLastError CreateMutexA GetCurrentProcessId GetTempPathA SetStdHandle GetLocalTime GetFileType MultiByteToWideChar ReadFile WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode SetFilePointer HeapFree GetProcAddress GetModuleHandleA ExitProcess EnterCriticalSection LeaveCriticalSection GetCommandLineA GetVersionExA HeapAlloc GetProcessHeap GetStartupInfoA TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent SetHandleCount GetStdHandle DeleteCriticalSection Sleep WriteConsoleA GetConsoleOutputCP WriteConsoleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapDestroy HeapCreate VirtualFree VirtualAlloc HeapReAlloc FlushFileBuffers LoadLibraryA InitializeCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringA LCMapStringW FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime RtlUnwind HeapSize GetLocaleInfoA GetStringTypeA GetStringTypeW

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-19_614432e8f34070f9ceae633ad3a98a65_amadey_elex_rhadamanthys_smoke-loader_stop

msi

kernel32

generic