2026-08-09_85f851dee9a26a7bf938d72a24985dc5_amadey_elex_floxif_rhadamanthys_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-09_85f851dee9a26a7bf938d72a24985dc5_amadey_elex_floxif_rhadamanthys_smoke-loader
Size 208KB
Sample260809-fx27gavsfs
SHA256 c5be08337575928b7f0e7e3e705c87113d8c53216df9a3153faa9e48fbc16955
MD5 85f851dee9a26a7bf938d72a24985dc5
SHA1 64d41cc520413aea18843bb03630e1f9dec6fe08
SHA512 554af65b40b99760320c2bc6de45e71ecdc00ee62c3816b09784e8554aa0bf11712d0c01e6f4a5ff76e1aa72c0df2b28176936cccb3c3f9beb8c355c71310c5f
SSDEEP 3072:D2v4NSwVkyJS6TDHTa1dR1pv6cgo0k2lQBV+UdE+rECWp7hKe95:avtXyVnHTkT1luo0CBV+UdvrEFp7hKeH
TLSH
T1E824BE1271C4C7FDD0050030789DAB9496F1EC3C09BA09E3E795B64EBEBDA83991A65F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-09_85f851dee9a26a7bf938d72a24985dc5_amadey_elex_floxif_rhadamanthys_smoke-loader

File Explorer

2026-08-09_85f851dee9a26a7bf938d72a24985dc5_amadey_elex_floxif_rhadamanthys_smoke-loader

.exe 208KB

2026-08-09_85f851dee9a26a7bf938d72a24985dc5_amadey_elex_floxif_rhadamanthys_smoke-loader

IMPHASH e445a73d17282df830d2bd077eab74d1
SHA256 c5be08337575928b7f0e7e3e705c87113d8c53216df9a3153faa9e48fbc16955
MD5 85f851dee9a26a7bf938d72a24985dc5
SHA1 64d41cc520413aea18843bb03630e1f9dec6fe08
SHA512 554af65b40b99760320c2bc6de45e71ecdc00ee62c3816b09784e8554aa0bf11712d0c01e6f4a5ff76e1aa72c0df2b28176936cccb3c3f9beb8c355c71310c5f
SSDEEP 3072:D2v4NSwVkyJS6TDHTa1dR1pv6cgo0k2lQBV+UdE+rECWp7hKe95:avtXyVnHTkT1luo0CBV+UdvrEFp7hKeH
TLSH
T1E824BE1271C4C7FDD0050030789DAB9496F1EC3C09BA09E3E795B64EBEBDA83991A65F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

47784

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

comctl32

ord17

kernel32

WriteFile lstrlenA GetModuleFileNameA CreateFileA RemoveDirectoryA SetEndOfFile SetEnvironmentVariableA CompareStringW CompareStringA SetThreadPriority CloseHandle GetSystemInfo VirtualProtect GetLocaleInfoA GetStringTypeW GetStringTypeA LoadLibraryA FlushFileBuffers SetStdHandle SetFilePointer VirtualQuery CreateProcessA GetCurrentThread GetCurrentProcess SetPriorityClass ResumeThread FindFirstFileA SetFileAttributesA DeleteFileA FindNextFileA FindClose GetModuleHandleA RaiseException RtlUnwind HeapFree ExitThread TlsSetValue TlsGetValue GetLastError CreateThread GetStartupInfoA GetCommandLineA GetVersionExA ExitProcess HeapReAlloc HeapAlloc SetUnhandledExceptionFilter TlsFree SetLastError GetCurrentThreadId TlsAlloc DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapDestroy HeapCreate VirtualFree VirtualAlloc IsBadWritePtr GetFileAttributesA GetProcAddress TerminateProcess UnhandledExceptionFilter HeapSize GetStdHandle FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType ReadFile QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA MultiByteToWideChar LCMapStringW IsBadReadPtr IsBadCodePtr GetACP GetOEMCP GetCPInfo InitializeCriticalSection

user32

DialogBoxParamA ShowWindow GetDC GetWindowRect ScreenToClient DrawTextExA ReleaseDC MoveWindow SystemParametersInfoA GetClientRect GetWindowLongA AdjustWindowRect BeginPaint LoadIconA DrawIcon EndPaint GetWindowTextA EnumChildWindows GetDlgItem SendMessageA EndDialog SetTimer SetWindowTextA wsprintfA MessageBoxA

gdi32

SelectObject

advapi32

RegCloseKey RegQueryInfoKeyA RegOpenKeyExA RegQueryValueExA RegOpenKeyA RegEnumValueA RegDeleteValueA RegEnumKeyExA RegDeleteKeyA

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-09_85f851dee9a26a7bf938d72a24985dc5_amadey_elex_floxif_rhadamanthys_smoke-loader

comctl32

kernel32

user32

gdi32

advapi32

generic