2026-08-09_3d66051909a4aa575c0e47566e9a2c21_amadey_elex_rhadamanthys_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-09_3d66051909a4aa575c0e47566e9a2c21_amadey_elex_rhadamanthys_smoke-loader
Size 876KB
Sample260809-rxp3pagn2w
SHA256 9ea1f0da4968fcddb29148e532a66ba1fa3499d5f7a9b7bc79d7e098508cc544
MD5 3d66051909a4aa575c0e47566e9a2c21
SHA1 c8abcf93bee0ae1e1ee86b316b6592392d4cb046
SHA512 188e0f3844fad61526a451e14b6c3e4898e45a71fddaf420fd85322b30a42c719756fb69891cd305ae4aaf66d05098288c6fc66df97525a3e9e30eb2e2e35916
SSDEEP 12288:So5CXc3ajG+hjQKymY8efKCpD7Gj9G6G1qT8nQkCu83L3Wl/np9DBDt3kbE:SowsqjnhMgeiCl7G0nehbGZpbD
TLSH
T1A7151227B2D480B6D5A3047442E6E75A6973FD316C308C03AB9929DEBEB19D18B39353
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-09_3d66051909a4aa575c0e47566e9a2c21_amadey_elex_rhadamanthys_smoke-loader

File Explorer

2026-08-09_3d66051909a4aa575c0e47566e9a2c21_amadey_elex_rhadamanthys_smoke-loader

.exe 876KB

2026-08-09_3d66051909a4aa575c0e47566e9a2c21_amadey_elex_rhadamanthys_smoke-loader

IMPHASH 16565ac95a428f6ccd17d07d629c1a8c
SHA256 9ea1f0da4968fcddb29148e532a66ba1fa3499d5f7a9b7bc79d7e098508cc544
MD5 3d66051909a4aa575c0e47566e9a2c21
SHA1 c8abcf93bee0ae1e1ee86b316b6592392d4cb046
SHA512 188e0f3844fad61526a451e14b6c3e4898e45a71fddaf420fd85322b30a42c719756fb69891cd305ae4aaf66d05098288c6fc66df97525a3e9e30eb2e2e35916
SSDEEP 12288:So5CXc3ajG+hjQKymY8efKCpD7Gj9G6G1qT8nQkCu83L3Wl/np9DBDt3kbE:SowsqjnhMgeiCl7G0nehbGZpbD
TLSH
T1A7151227B2D480B6D5A3047442E6E75A6973FD316C308C03AB9929DEBEB19D18B39353
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

47023

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msiloadr.pdb

oleaut32

VarUI4FromStr SysAllocStringLen GetErrorInfo SetErrorInfo SysAllocString SysFreeString

ole32

OleRun CoCreateInstance CoTaskMemRealloc CoTaskMemAlloc CoTaskMemFree

kernel32

lstrcmpA CloseHandle CreateFileA Sleep SetLastError GetTickCount GetPrivateProfileStringA GetModuleFileNameA GetExitCodeProcess CreateProcessA FreeLibrary LoadLibraryA GetSystemDirectoryA WideCharToMultiByte lstrlenW IsBadReadPtr GetProcAddress WriteFile ReadFile DeleteFileW SetErrorMode LoadLibraryExA MultiByteToWideChar LoadResource SizeofResource EnterCriticalSection LeaveCriticalSection InterlockedIncrement InterlockedDecrement lstrlenA lstrcmpiA lstrcpynA IsDBCSLeadByte GetModuleHandleA FindResourceA GetUserDefaultLCID GetEnvironmentVariableA GetVersion CreateFileW FindResourceW GlobalAlloc GetModuleFileNameW GetTempFileNameW GetTempPathW LoadLibraryExW GetLocaleInfoA InterlockedExchange LocalFree GetTempFileNameA GetTempPathA GlobalFree CreateMutexA GetLastError DeleteCriticalSection InitializeCriticalSection RaiseException GetVersionExA GetThreadLocale SetStdHandle GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA SetUnhandledExceptionFilter GetCPInfo GetOEMCP HeapSize IsBadWritePtr GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter VirtualFree HeapCreate HeapDestroy TlsGetValue TlsSetValue TlsFree GetCurrentThreadId TlsAlloc GetFileType SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA UnhandledExceptionFilter GetStdHandle GetCurrentProcess TerminateProcess HeapReAlloc VirtualQuery GetSystemInfo VirtualAlloc VirtualProtect HeapAlloc RtlUnwind HeapFree ExitProcess GetCommandLineA GetStartupInfoA GetACP FlushFileBuffers SetFilePointer IsBadCodePtr

user32

LoadStringA MessageBoxA MsgWaitForMultipleObjects PeekMessageA TranslateMessage DispatchMessageA CharNextA

shell32

ShellExecuteA

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

advapi32

RegCloseKey RegQueryValueExA RegOpenKeyA QueryServiceStatus ControlService OpenServiceA OpenSCManagerA RegDeleteKeyA RegCreateKeyExA RegOpenKeyExA RegSetValueExA RegQueryInfoKeyA RegEnumValueA RegEnumKeyExA RegDeleteValueA

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-09_3d66051909a4aa575c0e47566e9a2c21_amadey_elex_rhadamanthys_smoke-loader

oleaut32

ole32

kernel32

user32

shell32

version

advapi32

generic