2026-07-30_a5101eda5b61a9f0473b98c3ec0a6dd1_amadey_elex_rhadamanthys_smoke-loader_stop

General

Target
2026-07-30_a5101eda5b61a9f0473b98c3ec0a6dd1_amadey_elex_rhadamanthys_smoke-loader_stop
Size 10.0MB
Sample260730-vrjkhashme
SHA256 f0489ed1e594f38d97a3f8b70efd565f237c05aa506e91e9c20a4a343ec5c353
MD5 a5101eda5b61a9f0473b98c3ec0a6dd1
SHA1 ff6df55e931a12f683715d4f7a3db6abdd270c28
SHA512 058851f8ebb9bc635c54e41d60353ee711580d576c80ed60e894b53b0251b96c716e8c37e0313106863ec58d84c46cb69abf4f2427580e2e590f6c07d4154ea1
SSDEEP 12288:iS5WDjmHFYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYl:wmHv
TLSH
T1F5B618921BF89816F7F71E746FB22B891937F8A7783847EE0891211E1D72AD2C841753
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-30_a5101eda5b61a9f0473b98c3ec0a6dd1_amadey_elex_rhadamanthys_smoke-loader_stop

File Explorer

2026-07-30_a5101eda5b61a9f0473b98c3ec0a6dd1_amadey_elex_rhadamanthys_smoke-loader_stop

.exe 10.0MB

2026-07-30_a5101eda5b61a9f0473b98c3ec0a6dd1_amadey_elex_rhadamanthys_smoke-loader_stop

IMPHASH a30a0500e42c1c2a47d73d6b33cde834
SHA256 f0489ed1e594f38d97a3f8b70efd565f237c05aa506e91e9c20a4a343ec5c353
MD5 a5101eda5b61a9f0473b98c3ec0a6dd1
SHA1 ff6df55e931a12f683715d4f7a3db6abdd270c28
SHA512 058851f8ebb9bc635c54e41d60353ee711580d576c80ed60e894b53b0251b96c716e8c37e0313106863ec58d84c46cb69abf4f2427580e2e590f6c07d4154ea1
SSDEEP 12288:iS5WDjmHFYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYl:wmHv
TLSH
T1F5B618921BF89816F7F71E746FB22B891937F8A7783847EE0891211E1D72AD2C841753
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

4591

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetDefaultCommConfigA SearchPathW SetPriorityClass SetFilePointer LoadResource SetUnhandledExceptionFilter InterlockedIncrement _lwrite ReadConsoleA CompareFileTime OpenSemaphoreA ConnectNamedPipe CallNamedPipeW GetProcessPriorityBoost GetModuleHandleW SetCommState GlobalAlloc Sleep CopyFileW GetPrivateProfileStructW SetSystemTimeAdjustment GetFileAttributesW IsBadWritePtr EnumResourceNamesW ExitThread lstrlenW FreeLibraryAndExitThread SetLastError GetProcAddress SetStdHandle SetFileApisToOEM GetLocalTime LoadLibraryA BuildCommDCBAndTimeoutsW IsSystemResumeAutomatic GetTapeParameters WaitForMultipleObjects SetEnvironmentVariableA lstrcatW FreeEnvironmentStringsW GetCurrentDirectoryA FindAtomW GetProfileSectionW lstrcpyA GetACP FileTimeToDosDateTime GetLastError MoveFileA GetStartupInfoW ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent GetCPInfo GetOEMCP IsValidCodePage LeaveCriticalSection EnterCriticalSection InitializeCriticalSectionAndSpinCount HeapAlloc VirtualAlloc HeapReAlloc RtlUnwind LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize GetModuleHandleA RaiseException

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-30_a5101eda5b61a9f0473b98c3ec0a6dd1_amadey_elex_rhadamanthys_smoke-loader_stop

kernel32

generic