2026-07-23_32de6cc1950bd9219f99473909c2dc0c_amadey_elex_rhadamanthys_smoke-loader_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-23_32de6cc1950bd9219f99473909c2dc0c_amadey_elex_rhadamanthys_smoke-loader_stop
Size 264KB
Sample260723-dblw9adj8x
SHA256 9458f9812fda43a9a094cdb94c9319796085869cdc82f6d281d2d69daff909c5
MD5 32de6cc1950bd9219f99473909c2dc0c
SHA1 ee5b91ab7a72f436c34569063d36de75c759daf5
SHA512 302466e5632ae52976ae00ca603bd8127d34a25d5b63463335d8c0fb7933b18e75ce9c5cde646fa83e0ce4146ddb09d2b9c3f4ee85b641e360cc8d82ff57a206
SSDEEP 6144:LMU5JVNPrGzXAmdfdzaKSDzsLy8CWSZBwQQUe:LZ/HDwXtvz0zEyQSZeQo
TLSH
T1E044F145F4B04A77EC9944750C36939ABA6EFC215734898F23D51ECADE423C78E363A2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-23_32de6cc1950bd9219f99473909c2dc0c_amadey_elex_rhadamanthys_smoke-loader_stop

File Explorer

2026-07-23_32de6cc1950bd9219f99473909c2dc0c_amadey_elex_rhadamanthys_smoke-loader_stop

.exe 264KB

2026-07-23_32de6cc1950bd9219f99473909c2dc0c_amadey_elex_rhadamanthys_smoke-loader_stop

IMPHASH 8fa7806ef2356fad0cc61edad7a108e2
SHA256 9458f9812fda43a9a094cdb94c9319796085869cdc82f6d281d2d69daff909c5
MD5 32de6cc1950bd9219f99473909c2dc0c
SHA1 ee5b91ab7a72f436c34569063d36de75c759daf5
SHA512 302466e5632ae52976ae00ca603bd8127d34a25d5b63463335d8c0fb7933b18e75ce9c5cde646fa83e0ce4146ddb09d2b9c3f4ee85b641e360cc8d82ff57a206
SSDEEP 6144:LMU5JVNPrGzXAmdfdzaKSDzsLy8CWSZBwQQUe:LZ/HDwXtvz0zEyQSZeQo
TLSH
T1E044F145F4B04A77EC9944750C36939ABA6EFC215734898F23D51ECADE423C78E363A2
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

20177

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

c:\Projects\OmniSetup\Setup\Release\Setup.pdb

comctl32

ord17 PropertySheetA

lz32

LZOpenFileA LZClose LZCopy

kernel32

lstrcpyA FindResourceA LoadResource VirtualFree WriteFile Sleep SizeofResource MulDiv ReadFile GetShortPathNameA VirtualAlloc CopyFileA GetTempFileNameA MoveFileA LockResource GetModuleFileNameA GetVersionExA GetTempPathA GetLocaleInfoA GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA RtlUnwind InitializeCriticalSection HeapSize GetOEMCP GetACP GetCPInfo HeapReAlloc EnterCriticalSection LeaveCriticalSection GetSystemTimeAsFileTime GetCurrentProcessId DeleteFileA LocalFree CloseHandle WritePrivateProfileStringA LocalAlloc CreateFileMappingA LoadLibraryA GetProcAddress lstrcmpiA GetLastError CreateDirectoryA MultiByteToWideChar lstrcatA GetFileAttributesA GetWindowsDirectoryA GetCurrentThread GetCurrentProcess FreeLibrary SetEndOfFile lstrcpynA MoveFileExA UnmapViewOfFile MapViewOfFile lstrlenA SetFilePointer GetFileSize CreateFileA GetTickCount QueryPerformanceCounter HeapCreate HeapDestroy InterlockedDecrement GetCurrentThreadId SetLastError InterlockedIncrement TlsFree TlsSetValue TlsAlloc TlsGetValue DeleteCriticalSection GetFileType SetHandleCount GetCommandLineA HeapFree HeapAlloc GetProcessHeap GetStartupInfoA TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException GetModuleHandleA ExitProcess GetStdHandle FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW

user32

MessageBoxA ExitWindowsEx wsprintfA EndPaint SendDlgItemMessageA SetForegroundWindow GetParent SendMessageA BeginPaint GetUpdateRect GetDC TranslateMessage SetWindowLongA InvalidateRect PeekMessageA ReleaseDC GetDlgItem CheckDlgButton ShowWindow IsDlgButtonChecked PostMessageA DispatchMessageA LoadImageA UpdateWindow FindWindowA GetDlgItemTextA SetDlgItemTextA LoadStringA

gdi32

BitBlt DeleteDC GetDeviceCaps CreateFontIndirectA CreatePalette DeleteObject SelectObject CreateCompatibleDC RealizePalette SelectPalette GetObjectA UpdateColors

advapi32

InitializeAcl OpenThreadToken SetSecurityDescriptorGroup RegCloseKey AdjustTokenPrivileges GetLengthSid IsValidSecurityDescriptor FreeSid AddAccessAllowedAce SetSecurityDescriptorOwner AllocateAndInitializeSid RegDeleteValueA OpenProcessToken RegOpenKeyExA RegCreateKeyExA LookupPrivilegeValueA SetSecurityDescriptorDacl InitializeSecurityDescriptor DuplicateToken RegQueryValueExA RegSetValueExA AccessCheck

shell32

SHGetPathFromIDListA SHGetMalloc ShellExecuteA SHBrowseForFolderA SHChangeNotify SHGetSpecialFolderLocation

ole32

CoUninitialize CoInitialize CoCreateInstance

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-23_32de6cc1950bd9219f99473909c2dc0c_amadey_elex_rhadamanthys_smoke-loader_stop

comctl32

lz32

kernel32

user32

gdi32

advapi32

shell32

ole32

generic