2026-08-02_479b150b33c04092b03930334e244c33_amadey_elex_karagany_rhadamanthys_smoke-loader

General

Target
2026-08-02_479b150b33c04092b03930334e244c33_amadey_elex_karagany_rhadamanthys_smoke-loader
Size 5.5MB
Sample260802-drb2zsstd1
SHA256 a154b91b5aefa3b9b7c0da2a0c6ab789fa0a10730f07adf3b831e5fac1b4be7b
MD5 479b150b33c04092b03930334e244c33
SHA1 5ae50fc7adee95ed20175e7326addeff52df67ae
SHA512 9449e193af77514251f7411acdf2bbd13c49b8a23be6b406f859ae3f6f73f0824dd04be4c9ab9beeb3d14b96cd00e89a0062688964e85a61545735e0c0f374c8
SSDEEP 98304:J8KVWGZp6+Wvl3D1tBpzOUV3m+hVGiqhx0RHbNvR5D1toKOQ5MpIcRnVKN1f:J8KV1LclppiUFm+X1v7lD1tZOBFVK3f
TLSH
T1354633AEB0E08C25DC651AB0D73E03E340FD5E644B2AD96AE8E884E02FD45A17F7C575
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-02_479b150b33c04092b03930334e244c33_amadey_elex_karagany_rhadamanthys_smoke-loader

File Explorer

2026-08-02_479b150b33c04092b03930334e244c33_amadey_elex_karagany_rhadamanthys_smoke-loader

.exe 5.5MB

2026-08-02_479b150b33c04092b03930334e244c33_amadey_elex_karagany_rhadamanthys_smoke-loader

IMPHASH ab48de9810f4cbcfaca67b96ba2cfc48
SHA256 a154b91b5aefa3b9b7c0da2a0c6ab789fa0a10730f07adf3b831e5fac1b4be7b
MD5 479b150b33c04092b03930334e244c33
SHA1 5ae50fc7adee95ed20175e7326addeff52df67ae
SHA512 9449e193af77514251f7411acdf2bbd13c49b8a23be6b406f859ae3f6f73f0824dd04be4c9ab9beeb3d14b96cd00e89a0062688964e85a61545735e0c0f374c8
SSDEEP 98304:J8KVWGZp6+Wvl3D1tBpzOUV3m+hVGiqhx0RHbNvR5D1toKOQ5MpIcRnVKN1f:J8KV1LclppiUFm+X1v7lD1tZOBFVK3f
TLSH
T1354633AEB0E08C25DC651AB0D73E03E340FD5E644B2AD96AE8E884E02FD45A17F7C575
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

21789

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetProcAddress LoadLibraryA VirtualAlloc GetLastError SizeofResource LockResource LoadResource FindResourceW FindResourceExW GetEnvironmentVariableW WideCharToMultiByte lstrlenW MultiByteToWideChar lstrlenA CloseHandle WriteFile CreateFileW CreateProcessW GetModuleHandleW ReadFile GetFileSize GetTempFileNameW GetTempPathW SetEnvironmentVariableW GetModuleFileNameW DeleteFileW GetCommandLineW HeapSetInformation GetStartupInfoW HeapFree RaiseException GetSystemTimeAsFileTime RtlUnwind SetUnhandledExceptionFilter ExitProcess DecodePointer GetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate HeapDestroy QueryPerformanceCounter GetTickCount GetCurrentProcessId IsProcessorFeaturePresent TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapReAlloc HeapSize EnterCriticalSection LeaveCriticalSection FreeLibrary InterlockedExchange LoadLibraryW Sleep GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringW GetStringTypeW GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer WriteConsoleW SetStdHandle GetProcessHeap LocalAlloc

shell32

ShellExecuteW

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-02_479b150b33c04092b03930334e244c33_amadey_elex_karagany_rhadamanthys_smoke-loader

kernel32

shell32

generic