2026-08-09_e396f5da9a851c60ac232fac76df4c60_elex_floxif_rhadamanthys_smoke-loader_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-09_e396f5da9a851c60ac232fac76df4c60_elex_floxif_rhadamanthys_smoke-loader_stop
Size 226KB
Sample260809-ffkabs1alb
SHA256 5d5071bd6b9d8f4a3820d5615f343634044772fa81d6b56216dac642ed413319
MD5 e396f5da9a851c60ac232fac76df4c60
SHA1 6a86c949b1894894acbecc02f8e2ab7224de59e7
SHA512 83522bdd81fd7b6adc93252f8481a58c78cf8dd98b262196a8e7d46459f9f93fcffe204729836dad2fc4f4e1f49d05e6008502092921bff6e89141d3619cf657
SSDEEP 3072:t6irQv4nCzu9jFQTtkxe5d3hXJ0tsR+vLwGZcM2lQBV+UdE+rECWp7hKkUzP4:t6DJu9RQJHtTIBV+UdvrEFp7hKkUzw
TLSH
T18D34BF063280C3FAC594007474189BA196F7FE3D0D6E4153F7653A4D6F7E292AB6E28B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Signatures

Codesign digest Mismatch 1 IoCs

File was altered after it was signed.

resource
2026-08-09_e396f5da9a851c60ac232fac76df4c60_elex_floxif_rhadamanthys_smoke-loader_stop

File Explorer

2026-08-09_e396f5da9a851c60ac232fac76df4c60_elex_floxif_rhadamanthys_smoke-loader_stop

.exe 226KB

2026-08-09_e396f5da9a851c60ac232fac76df4c60_elex_floxif_rhadamanthys_smoke-loader_stop

IMPHASH a150720749346e685551d6bdddf11392
SHA256 5d5071bd6b9d8f4a3820d5615f343634044772fa81d6b56216dac642ed413319
MD5 e396f5da9a851c60ac232fac76df4c60
SHA1 6a86c949b1894894acbecc02f8e2ab7224de59e7
SHA512 83522bdd81fd7b6adc93252f8481a58c78cf8dd98b262196a8e7d46459f9f93fcffe204729836dad2fc4f4e1f49d05e6008502092921bff6e89141d3619cf657
SSDEEP 3072:t6irQv4nCzu9jFQTtkxe5d3hXJ0tsR+vLwGZcM2lQBV+UdE+rECWp7hKkUzP4:t6DJu9RQJHtTIBV+UdvrEFp7hKkUzw
TLSH
T18D34BF063280C3FAC594007474189BA196F7FE3D0D6E4153F7653A4D6F7E292AB6E28B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Codesign digest Mismatch

File was altered after it was signed.

PE Signature issue

Digest

23:5b:fc:fc:61:50:94:d4:5f:5e:4f:e2:31:51:16:61:07:7d:02:b3

Digest Algorithm

sha1

PE Digests Matches

Not matched

Trusted

Not trusted

Signing Certificate

CN=Jonathan Bennett,C=GB,1.2.840.113549.1.9.1=#0c18737570706f7274406175746f69747363726970742e636f6d

Chains

Nov 25, 2007

CN=Jonathan Bennett,C=GB,1.2.840.113549.1.9.1=#0c18737570706f7274406175746f69747363726970742e636f6d

Subject

CN=Jonathan Bennett,C=GB,1.2.840.113549.1.9.1=#0c18737570706f7274406175746f69747363726970742e636f6d

Serial Number

01:00:00:00:00:01:09:bb:94:49:48

Issuer

CN=GlobalSign ObjectSign CA,OU=ObjectSign CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageKeyEncipherment, KeyUsageDataEncipherment

Revocation Status

Not revoked

Timespan

Mar 2, 2006 - Mar 2, 2009

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Serial Number

02:00:00:00:00:00:d6:78:b7:94:05

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Sep 1, 1998 - Jan 28, 2014

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=GlobalSign Primary Object Publishing CA,OU=Primary Object Publishing CA,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:08:d9:61:1c:d6

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jan 28, 1999 - Jan 27, 2014

Subject

CN=GlobalSign ObjectSign CA,OU=ObjectSign CA,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:08:d9:61:24:48

Issuer

CN=GlobalSign Primary Object Publishing CA,OU=Primary Object Publishing CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jan 22, 2004 - Jan 27, 2014

Minor OS version

Major OS version

Entry point

43175

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleA GetProcAddress GetFullPathNameA GetModuleFileNameA EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapReAlloc HeapAlloc ExitProcess HeapFree GetCommandLineA GetVersionExA GetProcessHeap RaiseException RtlUnwind SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection Sleep GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapSize HeapDestroy HeapCreate VirtualFree VirtualAlloc WriteFile LoadLibraryA InitializeCriticalSection MultiByteToWideChar ReadFile WideCharToMultiByte GetConsoleCP GetConsoleMode CloseHandle FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime FlushFileBuffers LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetFilePointer CreateFileA SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEndOfFile

advapi32

RegOpenKeyExA RegQueryValueExA RegCloseKey

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-09_e396f5da9a851c60ac232fac76df4c60_elex_floxif_rhadamanthys_smoke-loader_stop

PE Signature issue

kernel32

advapi32

generic