2026-08-10_1209fc4f9bd861f73c22ad42016842e1_amadey_elex_rhadamanthys_smoke-loader_stop

General

Target
2026-08-10_1209fc4f9bd861f73c22ad42016842e1_amadey_elex_rhadamanthys_smoke-loader_stop
Size 174KB
Sample260810-rgcsesar5w
SHA256 bc612c82552b08010ba519bf44c6add7d822be622e702901811fca34de12d950
MD5 1209fc4f9bd861f73c22ad42016842e1
SHA1 65ce33a29884769971941aa686641e01cdf0e448
SHA512 2e28e2b94e66d82fd4ba3e2f841a3ee45a5b912b75e358c80bfc93023165531bcfe1eb7672dce1a90d20e2771accd4748ff6f3a8b938e7504e88a3e48e639573
SSDEEP 3072:035iKlSSBsLicXdwZ2twIzpk0xr6hBwAJ+gL0rlMRux5UefDmF:h65BEpzpk0xr6hBwO+gL0xcuxi
TLSH
T16604BF0135D7C073E416007B8286C7F98BBF38A77E67BC9F9FC906D20A152A6DA16365
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-10_1209fc4f9bd861f73c22ad42016842e1_amadey_elex_rhadamanthys_smoke-loader_stop

File Explorer

2026-08-10_1209fc4f9bd861f73c22ad42016842e1_amadey_elex_rhadamanthys_smoke-loader_stop

.exe 174KB

2026-08-10_1209fc4f9bd861f73c22ad42016842e1_amadey_elex_rhadamanthys_smoke-loader_stop

IMPHASH 0f04263c474b2f86b9e0f24055a0f500
SHA256 bc612c82552b08010ba519bf44c6add7d822be622e702901811fca34de12d950
MD5 1209fc4f9bd861f73c22ad42016842e1
SHA1 65ce33a29884769971941aa686641e01cdf0e448
SHA512 2e28e2b94e66d82fd4ba3e2f841a3ee45a5b912b75e358c80bfc93023165531bcfe1eb7672dce1a90d20e2771accd4748ff6f3a8b938e7504e88a3e48e639573
SSDEEP 3072:035iKlSSBsLicXdwZ2twIzpk0xr6hBwAJ+gL0rlMRux5UefDmF:h65BEpzpk0xr6hBwO+gL0xcuxi
TLSH
T16604BF0135D7C073E416007B8286C7F98BBF38A77E67BC9F9FC906D20A152A6DA16365
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

7208

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

e:\home\mtk54289\Formal_Release\RaUIRelaunch\Release\RaUIReLaunch.pdb

kernel32

lstrcpyA GetVersionExA TerminateProcess OpenProcess CloseHandle FreeLibrary GetProcAddress lstrcmpA GetVersion GetModuleFileNameA CompareStringW CompareStringA GetTimeZoneInformation IsValidCodePage IsValidLocale OutputDebugStringA FindFirstFileA LoadLibraryA FindClose EnumSystemLocalesA GetUserDefaultLCID GetCommandLineA HeapFree HeapAlloc GetProcessHeap GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleA ExitProcess WriteFile GetStdHandle FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetLastError GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement GetCurrentThread HeapDestroy HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection FatalAppExitA EnterCriticalSection SetConsoleCtrlHandler InterlockedExchange InitializeCriticalSection Sleep GetCPInfo GetACP GetOEMCP VirtualAlloc HeapReAlloc RtlUnwind HeapSize MultiByteToWideChar GetLocaleInfoA GetLocaleInfoW LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetTimeFormatA GetDateFormatA SetEnvironmentVariableA

user32

FindWindowA PostMessageA wvsprintfA MessageBoxA

advapi32

RegQueryValueExA RegCloseKey RegOpenKeyExA

shell32

ShellExecuteExA

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-10_1209fc4f9bd861f73c22ad42016842e1_amadey_elex_rhadamanthys_smoke-loader_stop

kernel32

user32

advapi32

shell32

generic