2026-07-24_2e52d98e25ab8b58027abf032e764bfb_amadey_elex_rhadamanthys_smoke-loader_stop

General

Target
2026-07-24_2e52d98e25ab8b58027abf032e764bfb_amadey_elex_rhadamanthys_smoke-loader_stop
Size 48KB
Sample260724-bcbrkael4v
SHA256 30bc0cf7a1de1e29d3ecb16649a9adafa910b253eee19120ff60a5d06dbf153b
MD5 2e52d98e25ab8b58027abf032e764bfb
SHA1 bfc6b2819649d2f6a99a6d519e1ca3d3f7c2a854
SHA512 7ab2f4f24cd9aa3c96072ea016b152920c8e59f155fb109beb39b948b920406f7570b99a7af6280a1adae3363f8f095c0e2a332b8b1cd821af8106fab21bd3d7
SSDEEP 768:JXSc+goHbPt+77wfWcrfYvc9c5x/z4yPnT7nmo+s9hEQz:JXX4b167k2bPnT74zQz
TLSH
T1F2238D1A78D6C072CC0981750539C742A77BA9026FBAC1637FA9078D8EF62D05E3F365
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-24_2e52d98e25ab8b58027abf032e764bfb_amadey_elex_rhadamanthys_smoke-loader_stop

File Explorer

2026-07-24_2e52d98e25ab8b58027abf032e764bfb_amadey_elex_rhadamanthys_smoke-loader_stop

.exe 48KB

2026-07-24_2e52d98e25ab8b58027abf032e764bfb_amadey_elex_rhadamanthys_smoke-loader_stop

IMPHASH 503e777a649c0f9a5ad59bff43b69eac
SHA256 30bc0cf7a1de1e29d3ecb16649a9adafa910b253eee19120ff60a5d06dbf153b
MD5 2e52d98e25ab8b58027abf032e764bfb
SHA1 bfc6b2819649d2f6a99a6d519e1ca3d3f7c2a854
SHA512 7ab2f4f24cd9aa3c96072ea016b152920c8e59f155fb109beb39b948b920406f7570b99a7af6280a1adae3363f8f095c0e2a332b8b1cd821af8106fab21bd3d7
SSDEEP 768:JXSc+goHbPt+77wfWcrfYvc9c5x/z4yPnT7nmo+s9hEQz:JXX4b167k2bPnT74zQz
TLSH
T1F2238D1A78D6C072CC0981750539C742A77BA9026FBAC1637FA9078D8EF62D05E3F365
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5266

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CloseHandle CreateProcessW GetModuleHandleW GetModuleFileNameW Sleep HeapFree GetVersionExA HeapAlloc GetProcessHeap TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetProcAddress GetModuleHandleA ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA MultiByteToWideChar GetEnvironmentStrings FreeEnvironmentStringsW GetLastError GetEnvironmentStringsW GetCommandLineA GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapDestroy HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode EnterCriticalSection LeaveCriticalSection GetCPInfo GetACP GetOEMCP LoadLibraryA InitializeCriticalSection VirtualAlloc HeapReAlloc RtlUnwind SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize CreateFileA FlushFileBuffers

advapi32

OpenSCManagerW StartServiceW QueryServiceStatusEx CloseServiceHandle OpenServiceW

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-24_2e52d98e25ab8b58027abf032e764bfb_amadey_elex_rhadamanthys_smoke-loader_stop

kernel32

advapi32

generic