2026-07-30_185da1be7f11ad80a178fbf79eef3514_amadey_elex_rhadamanthys_smoke-loader_stop

General

Target
2026-07-30_185da1be7f11ad80a178fbf79eef3514_amadey_elex_rhadamanthys_smoke-loader_stop
Size 93KB
Sample260730-1b6b8azzev
SHA256 a456885920620b0dccea97d7f1fad1ddf3bb1cba632c071bc5648f14dd751005
MD5 185da1be7f11ad80a178fbf79eef3514
SHA1 7829974f5a7174b93ad1990c758536e657995131
SHA512 d8d393af8cc7becd62db5edad241e715a990647f9cab433ba6301cf8a9c51157966cbe64f6b9fae8e4234f34a408da783b8a2d8ff56a4f5910896e041c499d14
SSDEEP 1536:kf4fWqndwW3GrZagU/RITYfoaiWFLX5tt8B4kRXCPWNAMHvjAz50mp:kgftaW3GrGWTYfo0LqMIAMHvkz50mp
TLSH
T19B935C1176D0C072D45224725A24D7F2AB3EB8356B75D9CBBB98173E1F702C0E6363AA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-30_185da1be7f11ad80a178fbf79eef3514_amadey_elex_rhadamanthys_smoke-loader_stop

File Explorer

2026-07-30_185da1be7f11ad80a178fbf79eef3514_amadey_elex_rhadamanthys_smoke-loader_stop

.exe 93KB

2026-07-30_185da1be7f11ad80a178fbf79eef3514_amadey_elex_rhadamanthys_smoke-loader_stop

IMPHASH 53faad4f565688d1f174655c6f259420
SHA256 a456885920620b0dccea97d7f1fad1ddf3bb1cba632c071bc5648f14dd751005
MD5 185da1be7f11ad80a178fbf79eef3514
SHA1 7829974f5a7174b93ad1990c758536e657995131
SHA512 d8d393af8cc7becd62db5edad241e715a990647f9cab433ba6301cf8a9c51157966cbe64f6b9fae8e4234f34a408da783b8a2d8ff56a4f5910896e041c499d14
SSDEEP 1536:kf4fWqndwW3GrZagU/RITYfoaiWFLX5tt8B4kRXCPWNAMHvjAz50mp:kgftaW3GrGWTYfo0LqMIAMHvkz50mp
TLSH
T19B935C1176D0C072D45224725A24D7F2AB3EB8356B75D9CBBB98173E1F702C0E6363AA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

21463

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

d:\verpatch.pdb

kernel32

GetLastError CreateFileW SetFilePointer CloseHandle WriteFile GetShortPathNameW SetLastError BeginUpdateResourceW UpdateResourceW EndUpdateResourceW SetErrorMode SetThreadLocale GetFileSizeEx ReadFile FindResourceExW SizeofResource LoadResource LockResource CreateFileA FlushFileBuffers HeapAlloc HeapFree EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent DeleteCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate GetModuleHandleW Sleep GetProcAddress ExitProcess GetStdHandle GetModuleFileNameA GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapSize RaiseException WideCharToMultiByte GetConsoleCP GetConsoleMode SetHandleCount GetFileType GetStartupInfoA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind InitializeCriticalSectionAndSpinCount LoadLibraryA MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle

imagehlp

CheckSumMappedFile UnMapAndLoad MapAndLoad

version

GetFileVersionInfoW

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-30_185da1be7f11ad80a178fbf79eef3514_amadey_elex_rhadamanthys_smoke-loader_stop

kernel32

imagehlp

version

generic