2026-07-20_ffcc282158d8c8995dc6d78fed3aa7c7_amadey_dharma_elex_rhadamanthys_smoke-loader_stop

General

Target
2026-07-20_ffcc282158d8c8995dc6d78fed3aa7c7_amadey_dharma_elex_rhadamanthys_smoke-loader_stop
Size 797KB
Sample260720-csg4yscv2q
SHA256 b935cdf6ead669f50201327fc6a75e64a062bab8a2a6b324dc56d26c94382906
MD5 ffcc282158d8c8995dc6d78fed3aa7c7
SHA1 ba3ff6acf7a516a8902a309d7396f7f286b15d01
SHA512 eb9fb0263e7e02610e2248eca94b3b7ae159b3a46aca27b0c75d0350add4a04f34573694cdcce44f719e3574f372898fc0547df620a073d50796f9d354de6373
SSDEEP 12288:eoIEqX6xCU00TIyUNynw1tFH6RxwDCFcMDPhrlGX/d1AZJ0/nh9nwHHEtp/bD4:eHELxCU0mnwT18KMBGXVkCpqEtp/bc
TLSH
T1DF05F130AE90C435E1B361F057B583F8A62D7EB19B3452CBA3E16ADE66346E59C30743
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-20_ffcc282158d8c8995dc6d78fed3aa7c7_amadey_dharma_elex_rhadamanthys_smoke-loader_stop

File Explorer

2026-07-20_ffcc282158d8c8995dc6d78fed3aa7c7_amadey_dharma_elex_rhadamanthys_smoke-loader_stop

.exe 797KB

2026-07-20_ffcc282158d8c8995dc6d78fed3aa7c7_amadey_dharma_elex_rhadamanthys_smoke-loader_stop

IMPHASH 1e2b710f415a093c1bd3178e445c86b7
SHA256 b935cdf6ead669f50201327fc6a75e64a062bab8a2a6b324dc56d26c94382906
MD5 ffcc282158d8c8995dc6d78fed3aa7c7
SHA1 ba3ff6acf7a516a8902a309d7396f7f286b15d01
SHA512 eb9fb0263e7e02610e2248eca94b3b7ae159b3a46aca27b0c75d0350add4a04f34573694cdcce44f719e3574f372898fc0547df620a073d50796f9d354de6373
SSDEEP 12288:eoIEqX6xCU00TIyUNynw1tFH6RxwDCFcMDPhrlGX/d1AZJ0/nh9nwHHEtp/bD4:eHELxCU0mnwT18KMBGXVkCpqEtp/bc
TLSH
T1DF05F130AE90C435E1B361F057B583F8A62D7EB19B3452CBA3E16ADE66346E59C30743
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

5712

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\nolic\90-vusaleb.pdb

kernel32

DosDateTimeToFileTime FindFirstChangeNotificationW lstrlenA CopyFileExW SetLocalTime GetCPInfo HeapAlloc GetQueuedCompletionStatus ReadConsoleA InterlockedDecrement GlobalSize GetSystemWindowsDirectoryW GetNamedPipeHandleStateA CreateDirectoryW GlobalLock GetModuleHandleW GetTickCount GetCurrentThread GetSystemTimeAsFileTime GetPrivateProfileStringW SetCommState GetCommandLineA TlsSetValue GetPrivateProfileIntA GetVolumeInformationA LoadLibraryW GetConsoleAliasExesLengthW GetVersionExW IsProcessorFeaturePresent TerminateProcess LCMapStringA GetPrivateProfileIntW InterlockedExchange SetCurrentDirectoryA GetStartupInfoA SetThreadLocale GetCPInfoExW GetLastError GetProcAddress SetFirmwareEnvironmentVariableW SetStdHandle DisableThreadLibraryCalls Process32FirstW LocalAlloc WritePrivateProfileStringA SetCurrentDirectoryW SetThreadIdealProcessor SetEnvironmentVariableA GetThreadPriority QueryMemoryResourceNotification HeapSetInformation FreeEnvironmentStringsW EnumResourceNamesA GetStringTypeW RequestWakeupLatency FindAtomW GetFileInformationByHandle ReadConsoleOutputCharacterW GetProfileSectionW DeleteFileA CreateFileA HeapValidate IsBadReadPtr RaiseException EnterCriticalSection LeaveCriticalSection GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW DeleteCriticalSection TlsGetValue TlsAlloc GetCurrentThreadId TlsFree InterlockedIncrement SetLastError QueryPerformanceCounter GetCurrentProcessId Sleep ExitProcess GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType HeapDestroy HeapCreate HeapFree VirtualFree WriteFile HeapSize HeapReAlloc VirtualAlloc GetACP GetOEMCP IsValidCodePage DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW RtlUnwind MultiByteToWideChar InitializeCriticalSectionAndSpinCount LoadLibraryA LCMapStringW GetStringTypeA GetLocaleInfoA FlushFileBuffers GetConsoleCP GetConsoleMode ReadFile SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP

user32

GetComboBoxInfo

msimg32

AlphaBlend

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-20_ffcc282158d8c8995dc6d78fed3aa7c7_amadey_dharma_elex_rhadamanthys_smoke-loader_stop

kernel32

user32

msimg32

generic