2026-07-24_23f2a27f7452690a0758c9541477fda1_amadey_cloudeye_elex_rhadamanthys_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-24_23f2a27f7452690a0758c9541477fda1_amadey_cloudeye_elex_rhadamanthys_smoke-loader
Size 2.0MB
Sample260724-llm63afe23
SHA256 7a810016063f35d34b927b738a6f12fda2c7d8155bcc237df4af62292fd50ffb
MD5 23f2a27f7452690a0758c9541477fda1
SHA1 53d099298a55e5dcb4bba844bfe016ec56c6b299
SHA512 83367a30d90609a801469fb5b41d229508559b92f202c5afe89dd833211539093a47e813e13eb2cbcc40aef84b26e9f9584de0f6341dc13bcfbad935aa4aec16
SSDEEP 49152:o4Z6knEevWamW3jLjfpE36UyclVPZ8jVGT1FHJc+638Enmp:pyezThE3PyUNZ88R4T38Enmp
TLSH
T17BA5F12EB10642F1CB260134976B5F7299328C6C92784B2D9FC1301E6FF6B8969779C7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
2026-07-24_23f2a27f7452690a0758c9541477fda1_amadey_cloudeye_elex_rhadamanthys_smoke-loader
unpack001/$PLUGINSDIR/jdkwindows.exe

File Explorer

2026-07-24_23f2a27f7452690a0758c9541477fda1_amadey_cloudeye_elex_rhadamanthys_smoke-loader

.exe 2.0MB
$PLUGINSDIR/jdkwindows.exe

.exe 1.8MB

2026-07-24_23f2a27f7452690a0758c9541477fda1_amadey_cloudeye_elex_rhadamanthys_smoke-loader

IMPHASH dd1742eadfc6df18ded3c26ae64ad610
SHA256 7a810016063f35d34b927b738a6f12fda2c7d8155bcc237df4af62292fd50ffb
MD5 23f2a27f7452690a0758c9541477fda1
SHA1 53d099298a55e5dcb4bba844bfe016ec56c6b299
SHA512 83367a30d90609a801469fb5b41d229508559b92f202c5afe89dd833211539093a47e813e13eb2cbcc40aef84b26e9f9584de0f6341dc13bcfbad935aa4aec16
SSDEEP 49152:o4Z6knEevWamW3jLjfpE36UyclVPZ8jVGT1FHJc+638Enmp:pyezThE3PyUNZ88R4T38Enmp
TLSH
T17BA5F12EB10642F1CB260134976B5F7299328C6C92784B2D9FC1301E6FF6B8969779C7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

12688

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFileTime CompareFileTime SearchPathA GetShortPathNameA GetFullPathNameA MoveFileA SetCurrentDirectoryA GetFileAttributesA GetLastError CreateDirectoryA SetFileAttributesA Sleep GetFileSize GetModuleFileNameA GetTickCount GetCurrentProcess CopyFileA CloseHandle GetWindowsDirectoryA GetTempPathA GetCommandLineA LoadLibraryA lstrcpynA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread CreateProcessA RemoveDirectoryA CreateFileA GetTempFileNameA lstrlenA lstrcatA GetSystemDirectoryA lstrcmpiA lstrcmpA ExpandEnvironmentStringsA GlobalFree GlobalAlloc WaitForSingleObject GetExitCodeProcess SetErrorMode GetModuleHandleA LoadLibraryExA GetProcAddress FreeLibrary MultiByteToWideChar WritePrivateProfileStringA GetPrivateProfileStringA WriteFile ReadFile MulDiv SetFilePointer FindClose FindNextFileA FindFirstFileA DeleteFileA ExitProcess

user32

EndDialog ScreenToClient GetWindowRect EnableMenuItem GetSystemMenu SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard RegisterClassA TrackPopupMenu AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA CreateDialogParamA DestroyWindow SetTimer SetWindowTextA PostQuitMessage SetForegroundWindow wsprintfA SendMessageTimeoutA FindWindowExA SystemParametersInfoA CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA OpenClipboard ExitWindowsEx IsWindow GetDlgItem SetWindowLongA LoadImageA GetDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndPaint ShowWindow

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectA SetBkMode SetTextColor SelectObject

shell32

SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA SHGetSpecialFolderLocation

advapi32

RegQueryValueExA RegSetValueExA RegEnumKeyA RegEnumValueA RegOpenKeyExA RegDeleteKeyA RegDeleteValueA RegCloseKey RegCreateKeyExA

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

$PLUGINSDIR/jdkwindows.exe

IMPHASH 1701958eba48fbd8fa914c181601490c
SHA256 2621dec98d0b294ba979e9b6ceccacd7d6e1f7c36a8cb2be85be2191ac027c4d
MD5 ee852f2022e1dbf86f72117c35367716
SHA1 ad147a9940719c71efb13922c1a99c3520b70de1
SHA512 363448ebe4955cbfd8e3120bc93399bffaef32aab1b5d12d499f0ba308f14443f1538272cbd5faf395e99f4196c17d0c7d6ecd5376d2113df4e2cc0bf44e34c2
SSDEEP 49152:M6knEevWamW3jLjfpE36UyclVPZ8jVGT1FHJc+638Enmp:TezThE3PyUNZ88R4T38Enmp
TLSH
T1A8951227F1478272C1960339010F5FA1DA3AECBC93A1951AA7A1314C6FB33D972B76D6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

12710

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CloseHandle SetEvent GetExitCodeProcess WaitForSingleObject CreateProcessA CreateDirectoryA lstrcpyA CreateThread lstrcmpA lstrlenA lstrcatA GetCommandLineA FreeLibrary WideCharToMultiByte GetProcAddress LoadLibraryA GetWindowsDirectoryA GetEnvironmentVariableA GetLastError MultiByteToWideChar CreateFileA GetCurrentProcess GetSystemInfo WriteFile CreateEventA LocalFree GetTickCount GetCurrentProcessId GetSystemDirectoryA lstrcmpiA GetUserDefaultLangID ExitProcess LocalAlloc FormatMessageA LockResource LoadResource SizeofResource FindResourceA FlushFileBuffers SetStdHandle DeleteCriticalSection InitializeCriticalSection GetVersionExA GetLocaleInfoA GetACP SetFilePointer InterlockedExchange LCMapStringW LCMapStringA VirtualProtect IsBadCodePtr SetUnhandledExceptionFilter GetOEMCP GetCPInfo GetStringTypeW GetStringTypeA QueryPerformanceCounter GetFileType SetHandleCount EnterCriticalSection LeaveCriticalSection GetModuleHandleA TerminateProcess HeapFree HeapAlloc RtlUnwind GetSystemTimeAsFileTime GetStartupInfoA HeapReAlloc VirtualQuery TlsAlloc SetLastError GetCurrentThreadId TlsFree TlsSetValue TlsGetValue HeapDestroy HeapCreate VirtualFree VirtualAlloc HeapSize GetStdHandle GetModuleFileNameA UnhandledExceptionFilter FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW

user32

LoadStringA MessageBoxA wsprintfA

advapi32

RegSetValueExA RegQueryValueExA RegOpenKeyExA RegCloseKey RegDeleteValueA

version

VerQueryValueA GetFileVersionInfoA

2026-07-24_23f2a27f7452690a0758c9541477fda1_amadey_cloudeye_elex_rhadamanthys_smoke-loader

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

generic

$PLUGINSDIR/jdkwindows.exe

kernel32

user32

advapi32

version

generic