2026-07-30_c5dd24a82191bad1ecb7b8afdff63fa9_amadey_elex_floxif_rhadamanthys_smoke-loader_stop

General

Target
2026-07-30_c5dd24a82191bad1ecb7b8afdff63fa9_amadey_elex_floxif_rhadamanthys_smoke-loader_stop
Size 18.6MB
Sample260730-sb7w2sbc64
SHA256 6eee90d7ebc76f69dae9de9af657c5b05f983cb4c2834b92f4f20ebadae4405d
MD5 c5dd24a82191bad1ecb7b8afdff63fa9
SHA1 b44c406522073df6ee719b416ba72f8270d831c7
SHA512 74accdecbdb297b3a631674df439311fd371de166e473236956a9331fa73027e37e60e6ab298d4b8c74766c771f5822cd8790f6acb1c0e62ec327fc49cdcc27b
SSDEEP 393216:akqPNL0Z2KuctL5jCjdDbP1Yz9lheqHjoWFWs9+NNOO:akuNLZKu2dQbP1Yz9lheqDoWFWsgqO
TLSH
T1F6173F179D198B83942CD7F8BE074DAD2F066B0DE8857AFF01625ECB7E202524C5E46E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-30_c5dd24a82191bad1ecb7b8afdff63fa9_amadey_elex_floxif_rhadamanthys_smoke-loader_stop

File Explorer

2026-07-30_c5dd24a82191bad1ecb7b8afdff63fa9_amadey_elex_floxif_rhadamanthys_smoke-loader_stop

.exe 18.6MB

2026-07-30_c5dd24a82191bad1ecb7b8afdff63fa9_amadey_elex_floxif_rhadamanthys_smoke-loader_stop

IMPHASH b599826b55723a948f6c6aa4b7b16c4c
SHA256 6eee90d7ebc76f69dae9de9af657c5b05f983cb4c2834b92f4f20ebadae4405d
MD5 c5dd24a82191bad1ecb7b8afdff63fa9
SHA1 b44c406522073df6ee719b416ba72f8270d831c7
SHA512 74accdecbdb297b3a631674df439311fd371de166e473236956a9331fa73027e37e60e6ab298d4b8c74766c771f5822cd8790f6acb1c0e62ec327fc49cdcc27b
SSDEEP 393216:akqPNL0Z2KuctL5jCjdDbP1Yz9lheqHjoWFWs9+NNOO:akuNLZKu2dQbP1Yz9lheqDoWFWsgqO
TLSH
T1F6173F179D198B83942CD7F8BE074DAD2F066B0DE8857AFF01625ECB7E202524C5E46E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

21264

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WaitForSingleObject CloseHandle CreateProcessA WriteFile DeleteFileA GetTempFileNameA GetTempPathA ReadFile SetFilePointer GetFileSize GetLastError CreateFileA GetModuleFileNameA GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA GetLocaleInfoA MultiByteToWideChar GetCommandLineA HeapFree GetVersionExA HeapAlloc GetProcessHeap GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException GetProcAddress GetModuleHandleA ExitProcess GetStdHandle FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapDestroy HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep HeapSize LoadLibraryA InitializeCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind

user32

LoadStringA MessageBoxA wsprintfA RegisterClassExA CreateWindowExA ShowWindow SetTimer GetMessageA TranslateMessage DispatchMessageA KillTimer DestroyWindow PostQuitMessage DefWindowProcA

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-30_c5dd24a82191bad1ecb7b8afdff63fa9_amadey_elex_floxif_rhadamanthys_smoke-loader_stop

kernel32

user32

generic