2026-08-09_f35e9b03e5e7f10b89ec95af3880c5d3_amadey_elex_rhadamanthys_smoke-loader_wapomi

General

Target
2026-08-09_f35e9b03e5e7f10b89ec95af3880c5d3_amadey_elex_rhadamanthys_smoke-loader_wapomi
Size 88KB
Sample260809-kyqbhscl3x
SHA256 bfff12352130d490d89041d7bdcea0af3981834daf943b66932e773a42dd4501
MD5 f35e9b03e5e7f10b89ec95af3880c5d3
SHA1 47a784e9ddaee3e7ebbebc3f69e9faae948661fb
SHA512 c0e37d6899c92a4370fe69db24ba8ca8c15a7206e5829186b6745b068cc1f1fa9b5f7cddd9c3d1cdab42484b20309dca4cb57047adfc9ef703d5fdc4f9865f87
SSDEEP 1536:uJvdezw+O3FEsLJErMKlZjaBER4rLs1YLLGCq2iW7z:uJvdezwVoMKlxlRMYYfGCH
TLSH
T153939E3269D0D87BC491457180A9AE1BA73B9C104BB08687BB987D5FBF333D3A936315
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-09_f35e9b03e5e7f10b89ec95af3880c5d3_amadey_elex_rhadamanthys_smoke-loader_wapomi

File Explorer

2026-08-09_f35e9b03e5e7f10b89ec95af3880c5d3_amadey_elex_rhadamanthys_smoke-loader_wapomi

.exe 88KB

2026-08-09_f35e9b03e5e7f10b89ec95af3880c5d3_amadey_elex_rhadamanthys_smoke-loader_wapomi

IMPHASH eeb5410908c6b922c6a2b2251f08cd97
SHA256 bfff12352130d490d89041d7bdcea0af3981834daf943b66932e773a42dd4501
MD5 f35e9b03e5e7f10b89ec95af3880c5d3
SHA1 47a784e9ddaee3e7ebbebc3f69e9faae948661fb
SHA512 c0e37d6899c92a4370fe69db24ba8ca8c15a7206e5829186b6745b068cc1f1fa9b5f7cddd9c3d1cdab42484b20309dca4cb57047adfc9ef703d5fdc4f9865f87
SSDEEP 1536:uJvdezw+O3FEsLJErMKlZjaBER4rLs1YLLGCq2iW7z:uJvdezwVoMKlxlRMYYfGCH
TLSH
T153939E3269D0D87BC491457180A9AE1BA73B9C104BB08687BB987D5FBF333D3A936315
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

73728

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FormatMessageA GetLastError LoadLibraryA GetTickCount GetModuleHandleA GetPrivateProfileStringA GetFileAttributesA SetCurrentDirectoryA GetModuleFileNameA GetSystemInfo FreeLibrary GetLocaleInfoA GetStringTypeW GetStringTypeA LCMapStringW MultiByteToWideChar LCMapStringA GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter VirtualProtect GetProcAddress RtlUnwind GetStartupInfoA GetCommandLineA GetVersionExA InterlockedExchange VirtualQuery ExitProcess TerminateProcess GetCurrentProcess WriteFile GetStdHandle UnhandledExceptionFilter FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection TlsAlloc SetLastError GetCurrentThreadId TlsFree TlsSetValue TlsGetValue HeapDestroy HeapCreate VirtualFree HeapFree LeaveCriticalSection EnterCriticalSection GetACP GetOEMCP GetCPInfo HeapAlloc InitializeCriticalSection VirtualAlloc HeapReAlloc HeapSize

user32

DefWindowProcA LoadIconA LoadCursorA RegisterClassA CreateWindowExA SetRect GetWindowLongA AdjustWindowRectEx GetSystemMetrics SetWindowPos ShowWindow GetDC FillRect ReleaseDC PeekMessageA GetMessageA DispatchMessageA LoadStringA wsprintfA MessageBoxA

gdi32

GetStockObject

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-09_f35e9b03e5e7f10b89ec95af3880c5d3_amadey_elex_rhadamanthys_smoke-loader_wapomi

kernel32

user32

gdi32

generic