2026-08-09_ab44e00e36f9c242bc2eae18bf2ef3c2_amadey_elex_rhadamanthys_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-09_ab44e00e36f9c242bc2eae18bf2ef3c2_amadey_elex_rhadamanthys_smoke-loader
Size 664KB
Sample260809-q6f1psyfpb
SHA256 beaf4527cb12e4cea66aed6959dd531a0d47a5620db153b2e94e037a115c2518
MD5 ab44e00e36f9c242bc2eae18bf2ef3c2
SHA1 e7434a629369393e6fc71427a40f9acfdd4a9170
SHA512 027257ebc1ff8442eabc635ddf47df71003094a1dafcb14cc11a646096aa6ba3937543f7d994a37d15bf4317a1ea6d5f8288261afda4f0b676fefd03c1c5a841
SSDEEP 12288:wo8H9EArZ0fIDpxwZ+5INc0aUMhZh7oO7a45vFY9l2I1OYWe2xB2h:woCEA+IDpxw/c0JcZghWbB+
TLSH
T124E4121274E0C032E99359306EA9DAE5093EE9A39B7956C3F380227E4FF5BD0193E543
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-09_ab44e00e36f9c242bc2eae18bf2ef3c2_amadey_elex_rhadamanthys_smoke-loader

File Explorer

2026-08-09_ab44e00e36f9c242bc2eae18bf2ef3c2_amadey_elex_rhadamanthys_smoke-loader

.exe 664KB

2026-08-09_ab44e00e36f9c242bc2eae18bf2ef3c2_amadey_elex_rhadamanthys_smoke-loader

IMPHASH 0e2d2504f905daf903e975cc4627bc3b
SHA256 beaf4527cb12e4cea66aed6959dd531a0d47a5620db153b2e94e037a115c2518
MD5 ab44e00e36f9c242bc2eae18bf2ef3c2
SHA1 e7434a629369393e6fc71427a40f9acfdd4a9170
SHA512 027257ebc1ff8442eabc635ddf47df71003094a1dafcb14cc11a646096aa6ba3937543f7d994a37d15bf4317a1ea6d5f8288261afda4f0b676fefd03c1c5a841
SSDEEP 12288:wo8H9EArZ0fIDpxwZ+5INc0aUMhZh7oO7a45vFY9l2I1OYWe2xB2h:woCEA+IDpxw/c0JcZghWbB+
TLSH
T124E4121274E0C032E99359306EA9DAE5093EE9A39B7956C3F380227E4FF5BD0193E543
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

18097

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

setupapi

SetupDiGetDeviceRegistryPropertyW SetupDiGetClassDevsW SetupDiEnumDeviceInfo

version

GetFileVersionInfoSizeW VerQueryValueW GetFileVersionInfoW

kernel32

Sleep GetProcAddress LoadLibraryW CloseHandle GetCurrentProcess LocalFree GetLastError GetTickCount GetModuleHandleW InterlockedDecrement FreeLibrary HeapSize SetStdHandle WriteConsoleW HeapReAlloc CreateFileW HeapSetInformation GetConsoleMode GetConsoleCP SetFilePointer RtlUnwind GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter HeapCreate GetFileType SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW GetModuleFileNameW GetStdHandle WriteFile ExitProcess DecodePointer GetCommandLineW FlushFileBuffers GetStartupInfoW RaiseException TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer GetCPInfo InterlockedIncrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapAlloc HeapFree IsProcessorFeaturePresent LCMapStringW GetStringTypeW WideCharToMultiByte MultiByteToWideChar InitializeCriticalSectionAndSpinCount DeleteCriticalSection LeaveCriticalSection EnterCriticalSection

advapi32

RegCloseKey RegEnumKeyExW ControlService RegOpenKeyExW QueryServiceStatus StartServiceW RegDeleteKeyW RegQueryValueExW RegCreateKeyExW OpenServiceW OpenSCManagerW CloseServiceHandle

ole32

CoCreateInstance CoUninitialize CLSIDFromString CoInitialize

oleaut32

SysFreeString SysAllocString

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-09_ab44e00e36f9c242bc2eae18bf2ef3c2_amadey_elex_rhadamanthys_smoke-loader

setupapi

version

kernel32

advapi32

ole32

oleaut32

generic