2026-07-20_a45d8fa2e2c9f61edbd85c643f2ecf58_amadey_elex_hijackloader_manuscrypt_rhadamanthys_smoke-loader_stop

General

Target
2026-07-20_a45d8fa2e2c9f61edbd85c643f2ecf58_amadey_elex_hijackloader_manuscrypt_rhadamanthys_smoke-loader_stop
Size 7.3MB
Sample260720-k3redae19w
SHA256 b0633a2630271c58e5686b5e4b290350f79e361a6c74d9455ef386640a273c6a
MD5 a45d8fa2e2c9f61edbd85c643f2ecf58
SHA1 bf3e0a70e5a00ff23cb232119a9446b76635553b
SHA512 d1adf4f608b9015ac1438132eff7c637564e9238644341a9f53e0898b6c866b41df5b6caa934ca5e9f1595a6f377398a057947d73ab3312d72b7d7449d7f697f
SSDEEP 196608:gCLtKSzPvXylp+34OSW5K0A41s/hWSEfd63+TzcG1K:gqMSDvL3L5K0r1s/hNEV63+THA
TLSH
T191763301B9569939FC610E321D2B80E5CF35FC363DFF645BBB2853199F80643A6263A6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-20_a45d8fa2e2c9f61edbd85c643f2ecf58_amadey_elex_hijackloader_manuscrypt_rhadamanthys_smoke-loader_stop

File Explorer

2026-07-20_a45d8fa2e2c9f61edbd85c643f2ecf58_amadey_elex_hijackloader_manuscrypt_rhadamanthys_smoke-loader_stop

.exe 7.3MB

2026-07-20_a45d8fa2e2c9f61edbd85c643f2ecf58_amadey_elex_hijackloader_manuscrypt_rhadamanthys_smoke-loader_stop

IMPHASH cc000e0a56358759c95f653af1246259
SHA256 b0633a2630271c58e5686b5e4b290350f79e361a6c74d9455ef386640a273c6a
MD5 a45d8fa2e2c9f61edbd85c643f2ecf58
SHA1 bf3e0a70e5a00ff23cb232119a9446b76635553b
SHA512 d1adf4f608b9015ac1438132eff7c637564e9238644341a9f53e0898b6c866b41df5b6caa934ca5e9f1595a6f377398a057947d73ab3312d72b7d7449d7f697f
SSDEEP 196608:gCLtKSzPvXylp+34OSW5K0A41s/hWSEfd63+TzcG1K:gqMSDvL3L5K0r1s/hNEV63+THA
TLSH
T191763301B9569939FC610E321D2B80E5CF35FC363DFF645BBB2853199F80643A6263A6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

52628

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFileAttributesA RemoveDirectoryA SetEndOfFile SetFilePointer CloseHandle UnmapViewOfFile MapViewOfFile CreateFileMappingA GetFileSize CreateFileA GetWindowsDirectoryA MoveFileExA GlobalFree GlobalUnlock GlobalHandle _lclose _llseek _lread _lopen GlobalLock GlobalAlloc GlobalMemoryStatus GetVersion GetModuleFileNameA WriteFile GetSystemTime CreateProcessA LocalFree ExitProcess FormatMessageA DeleteFileA GetModuleHandleA GetVolumeInformationA FindNextFileA GetTickCount WideCharToMultiByte WaitForSingleObject GetLongPathNameA GetTempPathA GetCommandLineA CopyFileA GetFileAttributesA LoadLibraryExA GetSystemDirectoryA SetErrorMode MultiByteToWideChar GetLocalTime lstrlenA CreateFileW ReadFile GetEnvironmentVariableA GetDriveTypeA LocalAlloc DosDateTimeToFileTime LocalFileTimeToFileTime GetVersionExA SetFileTime CreateDirectoryA SetCurrentDirectoryA FindFirstFileA FindClose GetLastError GetProcAddress FreeLibrary InterlockedExchange LoadLibraryA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapFree HeapReAlloc GetProcessHeap GetStartupInfoA GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId Sleep HeapSize DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapDestroy HeapCreate GetStdHandle LCMapStringA LCMapStringW FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode InitializeCriticalSection SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW FlushFileBuffers

gdi32

CreateDCA SetBkColor SetTextColor SetTextAlign GetBkColor GetTextExtentPoint32A ExtTextOutA GetDeviceCaps CreateFontIndirectA DeleteDC SelectObject DeleteObject

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-20_a45d8fa2e2c9f61edbd85c643f2ecf58_amadey_elex_hijackloader_manuscrypt_rhadamanthys_smoke-loader_stop

kernel32

gdi32

generic