2026-08-06_f1328ef5d9eddf4cd09b483a6544b53a_amadey_elex_karagany_manuscrypt_rhadamanthys_smoke-loader_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-06_f1328ef5d9eddf4cd09b483a6544b53a_amadey_elex_karagany_manuscrypt_rhadamanthys_smoke-loader_stop
Size 98KB
Sample260806-bea8tavyhs
SHA256 fa3b6bdeaab5ec71e53786823f249ed2a86004edfcc6ec64a84fa72f78d414e3
MD5 f1328ef5d9eddf4cd09b483a6544b53a
SHA1 deaa40b8a7ed4cb7c03c3716651425c5c3c62929
SHA512 fd69fe2d7c697167c6cc5bf4a212dbe8a117dd3ff758b73ebbabbede0c666f028c6d23f622d3d521551b14b22c61a2c2d62ee78bbb81740add4f4567079b4e24
SSDEEP 1536:dC6cykdU1VqmLL3Yp9QWK1sJIiC6jC/tnIzckmyiCqiGrAcUDq:dC6Py8L3YQqIBxWSyiCqiGrAp+
TLSH
T169A35B2176E0C472E4B3293288B5CAB15A6EBD7127B491CF73E4167E0F60BC15A36367
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-06_f1328ef5d9eddf4cd09b483a6544b53a_amadey_elex_karagany_manuscrypt_rhadamanthys_smoke-loader_stop

File Explorer

2026-08-06_f1328ef5d9eddf4cd09b483a6544b53a_amadey_elex_karagany_manuscrypt_rhadamanthys_smoke-loader_stop

.exe 98KB

2026-08-06_f1328ef5d9eddf4cd09b483a6544b53a_amadey_elex_karagany_manuscrypt_rhadamanthys_smoke-loader_stop

IMPHASH 43716a80e3ca2d571cffef5c461bff02
SHA256 fa3b6bdeaab5ec71e53786823f249ed2a86004edfcc6ec64a84fa72f78d414e3
MD5 f1328ef5d9eddf4cd09b483a6544b53a
SHA1 deaa40b8a7ed4cb7c03c3716651425c5c3c62929
SHA512 fd69fe2d7c697167c6cc5bf4a212dbe8a117dd3ff758b73ebbabbede0c666f028c6d23f622d3d521551b14b22c61a2c2d62ee78bbb81740add4f4567079b4e24
SSDEEP 1536:dC6cykdU1VqmLL3Yp9QWK1sJIiC6jC/tnIzckmyiCqiGrAcUDq:dC6Py8L3YQqIBxWSyiCqiGrAp+
TLSH
T169A35B2176E0C472E4B3293288B5CAB15A6EBD7127B491CF73E4167E0F60BC15A36367
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

22175

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapAlloc HeapFree InitializeCriticalSectionAndSpinCount DeleteCriticalSection HeapCreate InterlockedIncrement EnterCriticalSection LeaveCriticalSection InterlockedDecrement CreateEventA CloseHandle Sleep WaitForSingleObject SetEvent GetLastError GetCurrentThreadId SetLastError InterlockedExchange CreateEventW CancelIo WideCharToMultiByte lstrlenW ResetEvent VirtualAlloc GetProcAddress LoadLibraryW GetProcessHeap ResumeThread SetThreadContext GetThreadContext VirtualAllocEx CreateProcessA LoadLibraryA GetFileAttributesA GetSystemDirectoryA GetExitCodeProcess OpenProcess GetCurrentProcess GetCurrentProcessId CreateFileW GetLocalTime IsDebuggerPresent CreateThread GetConsoleWindow SetUnhandledExceptionFilter WriteConsoleW SetStdHandle LCMapStringW GetStringTypeW HeapReAlloc FreeLibrary VirtualFree MultiByteToWideChar GetConsoleMode GetConsoleCP SetFilePointer IsValidCodePage GetOEMCP GetACP GetCPInfo GetSystemTimeAsFileTime GetTickCount QueryPerformanceCounter GetStartupInfoW GetFileType SetHandleCount RtlUnwind RaiseException DecodePointer EncodePointer ExitThread GetCommandLineW HeapSetInformation TerminateProcess UnhandledExceptionFilter IsProcessorFeaturePresent TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameW HeapSize FreeEnvironmentStringsW GetEnvironmentStringsW FlushFileBuffers

user32

ShowWindow wsprintfW GetInputState PostThreadMessageA

advapi32

RegQueryValueExW

ws2_32

setsockopt WSACleanup WSAStartup WSAIoctl connect htons gethostbyname socket recv select send closesocket

winmm

timeGetTime

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-06_f1328ef5d9eddf4cd09b483a6544b53a_amadey_elex_karagany_manuscrypt_rhadamanthys_smoke-loader_stop

kernel32

user32

advapi32

ws2_32

winmm

generic