2026-07-20_07669270caf63d49dfd88d8bb1110914_amadey_dharma_elex_rhadamanthys_smoke-loader_stop

General

Target
2026-07-20_07669270caf63d49dfd88d8bb1110914_amadey_dharma_elex_rhadamanthys_smoke-loader_stop
Size 797KB
Sample260720-hel4msgz3m
SHA256 019e23589e2d3cbb789edc1ee24e4d4b33810f32ca7fc162e62e79386da4b400
MD5 07669270caf63d49dfd88d8bb1110914
SHA1 42cd7e0575bd1d9efeaa137ecdd40511511fedeb
SHA512 3733d9b3d78cedef1645362a15fa9cc661b0e972746b79d9382cd609bf71941546d0a4f233149465d848d9e38ced72e3f2c35641fad169027ad7d7d688365ccc
SSDEEP 12288:0oIEqX6xCU00TIyUNynw1tFH6RxwDCFcMDPhrlGX/d1AZJ0/nh9nwHHEtp/bD4:0HELxCU0mnwT18KMBGXVkCpqEtp/bc
TLSH
T12F05F130AE90C435E1B361F057B583F8A62D7EB19B3452CBA3E16ADE66346E59C30743
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-20_07669270caf63d49dfd88d8bb1110914_amadey_dharma_elex_rhadamanthys_smoke-loader_stop

File Explorer

2026-07-20_07669270caf63d49dfd88d8bb1110914_amadey_dharma_elex_rhadamanthys_smoke-loader_stop

.exe 797KB

2026-07-20_07669270caf63d49dfd88d8bb1110914_amadey_dharma_elex_rhadamanthys_smoke-loader_stop

IMPHASH 1e2b710f415a093c1bd3178e445c86b7
SHA256 019e23589e2d3cbb789edc1ee24e4d4b33810f32ca7fc162e62e79386da4b400
MD5 07669270caf63d49dfd88d8bb1110914
SHA1 42cd7e0575bd1d9efeaa137ecdd40511511fedeb
SHA512 3733d9b3d78cedef1645362a15fa9cc661b0e972746b79d9382cd609bf71941546d0a4f233149465d848d9e38ced72e3f2c35641fad169027ad7d7d688365ccc
SSDEEP 12288:0oIEqX6xCU00TIyUNynw1tFH6RxwDCFcMDPhrlGX/d1AZJ0/nh9nwHHEtp/bD4:0HELxCU0mnwT18KMBGXVkCpqEtp/bc
TLSH
T12F05F130AE90C435E1B361F057B583F8A62D7EB19B3452CBA3E16ADE66346E59C30743
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

5712

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\nolic\90-vusaleb.pdb

kernel32

DosDateTimeToFileTime FindFirstChangeNotificationW lstrlenA CopyFileExW SetLocalTime GetCPInfo HeapAlloc GetQueuedCompletionStatus ReadConsoleA InterlockedDecrement GlobalSize GetSystemWindowsDirectoryW GetNamedPipeHandleStateA CreateDirectoryW GlobalLock GetModuleHandleW GetTickCount GetCurrentThread GetSystemTimeAsFileTime GetPrivateProfileStringW SetCommState GetCommandLineA TlsSetValue GetPrivateProfileIntA GetVolumeInformationA LoadLibraryW GetConsoleAliasExesLengthW GetVersionExW IsProcessorFeaturePresent TerminateProcess LCMapStringA GetPrivateProfileIntW InterlockedExchange SetCurrentDirectoryA GetStartupInfoA SetThreadLocale GetCPInfoExW GetLastError GetProcAddress SetFirmwareEnvironmentVariableW SetStdHandle DisableThreadLibraryCalls Process32FirstW LocalAlloc WritePrivateProfileStringA SetCurrentDirectoryW SetThreadIdealProcessor SetEnvironmentVariableA GetThreadPriority QueryMemoryResourceNotification HeapSetInformation FreeEnvironmentStringsW EnumResourceNamesA GetStringTypeW RequestWakeupLatency FindAtomW GetFileInformationByHandle ReadConsoleOutputCharacterW GetProfileSectionW DeleteFileA CreateFileA HeapValidate IsBadReadPtr RaiseException EnterCriticalSection LeaveCriticalSection GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW DeleteCriticalSection TlsGetValue TlsAlloc GetCurrentThreadId TlsFree InterlockedIncrement SetLastError QueryPerformanceCounter GetCurrentProcessId Sleep ExitProcess GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType HeapDestroy HeapCreate HeapFree VirtualFree WriteFile HeapSize HeapReAlloc VirtualAlloc GetACP GetOEMCP IsValidCodePage DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW RtlUnwind MultiByteToWideChar InitializeCriticalSectionAndSpinCount LoadLibraryA LCMapStringW GetStringTypeA GetLocaleInfoA FlushFileBuffers GetConsoleCP GetConsoleMode ReadFile SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP

user32

GetComboBoxInfo

msimg32

AlphaBlend

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-20_07669270caf63d49dfd88d8bb1110914_amadey_dharma_elex_rhadamanthys_smoke-loader_stop

kernel32

user32

msimg32

generic