2026-07-29_742c8d45a930196964588426f10c4f23_amadey_elex_rhadamanthys_smoke-loader

General

Target
2026-07-29_742c8d45a930196964588426f10c4f23_amadey_elex_rhadamanthys_smoke-loader
Size 260KB
Sample260729-y6wp6aed64
SHA256 ca0639ec20899356f0c76a39420bbb3056abdc3d750d8f184064e458c25ac8f6
MD5 742c8d45a930196964588426f10c4f23
SHA1 467afd34606be218d6f3ccee26e9567c76b890a9
SHA512 c160a1caa1c38700a8937bc465b91da70a4eb3b05f5b1940325b35f3d27859f9f5f013abcb4743ce4a6da02b90fede274ab79a01b3be707135de04454161b08e
SSDEEP 1536:iastIhhZGf3LzIlutJZez9HFHTIrkZllzULnYHFIa7Ac3kLb0uiu:ihIhhYYutgHhIryllzU8P/ob0uiu
TLSH
T1FA44BF12B381D876EC55853A18AA7B455B77B9014A70889B1BD41FCE8F333D96E3E307
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-29_742c8d45a930196964588426f10c4f23_amadey_elex_rhadamanthys_smoke-loader

File Explorer

2026-07-29_742c8d45a930196964588426f10c4f23_amadey_elex_rhadamanthys_smoke-loader

.exe 260KB

2026-07-29_742c8d45a930196964588426f10c4f23_amadey_elex_rhadamanthys_smoke-loader

IMPHASH da018c7806df234536051b44c6242408
SHA256 ca0639ec20899356f0c76a39420bbb3056abdc3d750d8f184064e458c25ac8f6
MD5 742c8d45a930196964588426f10c4f23
SHA1 467afd34606be218d6f3ccee26e9567c76b890a9
SHA512 c160a1caa1c38700a8937bc465b91da70a4eb3b05f5b1940325b35f3d27859f9f5f013abcb4743ce4a6da02b90fede274ab79a01b3be707135de04454161b08e
SSDEEP 1536:iastIhhZGf3LzIlutJZez9HFHTIrkZllzULnYHFIa7Ac3kLb0uiu:ihIhhYYutgHhIryllzU8P/ob0uiu
TLSH
T1FA44BF12B381D876EC55853A18AA7B455B77B9014A70889B1BD41FCE8F333D96E3E307
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

44302

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\MARK50\PC\svgraph-debug\5003\SVGRAPH\Release\SVGRAPH.pdb

kernel32

OutputDebugStringA GetProcAddress GetModuleHandleA GetStartupInfoA GetCommandLineA GetVersionExA ExitProcess TerminateProcess GetCurrentProcess WriteFile GetStdHandle GetModuleFileNameA UnhandledExceptionFilter FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetLastError GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection TlsAlloc SetLastError GetCurrentThreadId GetCurrentThread TlsFree TlsSetValue TlsGetValue HeapDestroy HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection FatalAppExitA EnterCriticalSection LoadLibraryA GetACP GetOEMCP GetCPInfo HeapAlloc InitializeCriticalSection VirtualAlloc HeapReAlloc IsBadWritePtr RtlUnwind InterlockedExchange VirtualQuery HeapSize LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetTimeFormatA GetDateFormatA GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale IsValidCodePage VirtualProtect GetSystemInfo GetTimeZoneInformation GetLocaleInfoW CompareStringA CompareStringW SetEnvironmentVariableA

mscoree

_CorExeMain

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-29_742c8d45a930196964588426f10c4f23_amadey_elex_rhadamanthys_smoke-loader

kernel32

mscoree

generic