2026-08-12_48dbb2115afbe87aec9cfb5c8bffb260_elex_maze_rhadamanthys_smoke-loader_stop

General

Target
2026-08-12_48dbb2115afbe87aec9cfb5c8bffb260_elex_maze_rhadamanthys_smoke-loader_stop
Size 14.4MB
Sample260812-e9l6cav1bv
SHA256 ea0762420656a5b247219602c9d70aa5418b8d7ddb6e824ddf8967a7e982b6ff
MD5 48dbb2115afbe87aec9cfb5c8bffb260
SHA1 d873a99dbb18b00d9aa9a3651180c93905d498bc
SHA512 8ad92d250f32832e0f60a047781e5f6262f80f72f1df68f5a62880394dc9adb1190633ac99ed7f02ca7f828190dc876d907957735f3a525dad7535f3eee21a5d
SSDEEP 98304:3Mfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffn:
TLSH
T1B5E6225383E13D49EA7A8BB2DF2F86EC760EF6508E59377931199E9B00B1076C563B10
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-12_48dbb2115afbe87aec9cfb5c8bffb260_elex_maze_rhadamanthys_smoke-loader_stop

File Explorer

2026-08-12_48dbb2115afbe87aec9cfb5c8bffb260_elex_maze_rhadamanthys_smoke-loader_stop

.exe 14.4MB

2026-08-12_48dbb2115afbe87aec9cfb5c8bffb260_elex_maze_rhadamanthys_smoke-loader_stop

IMPHASH 8e46a2841daf40f5670f682d013443e4
SHA256 ea0762420656a5b247219602c9d70aa5418b8d7ddb6e824ddf8967a7e982b6ff
MD5 48dbb2115afbe87aec9cfb5c8bffb260
SHA1 d873a99dbb18b00d9aa9a3651180c93905d498bc
SHA512 8ad92d250f32832e0f60a047781e5f6262f80f72f1df68f5a62880394dc9adb1190633ac99ed7f02ca7f828190dc876d907957735f3a525dad7535f3eee21a5d
SSDEEP 98304:3Mfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffn:
TLSH
T1B5E6225383E13D49EA7A8BB2DF2F86EC760EF6508E59377931199E9B00B1076C563B10
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

26745

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\matu\41\xi.pdb

kernel32

DebugActiveProcess GetThreadContext WriteConsoleInputW GetLocaleInfoA GetConsoleAliasA GetCurrentProcess InterlockedCompareExchange GetNumberFormatA ReadConsoleW GetWindowsDirectoryA GetCompressedFileSizeW GetUserDefaultLangID GlobalAlloc GetVolumeInformationA GlobalFindAtomA LoadLibraryW TerminateThread GetConsoleAliasExesLengthW GetFileAttributesW GetModuleFileNameW GetACP GetLastError GetThreadLocale RemoveDirectoryA CopyFileA VirtualAllocEx GetNumaHighestNodeNumber LoadLibraryA WriteConsoleA SetCalendarInfoW CreateHardLinkW FindFirstVolumeMountPointW AddAtomW VirtualLock VirtualProtect ReadConsoleInputW DeleteTimerQueueTimer FindNextVolumeA WriteProcessMemory CreateFileW WriteConsoleW WideCharToMultiByte MultiByteToWideChar GetStringTypeW EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection HeapFree GetCommandLineA GetCPInfo RaiseException RtlUnwind HeapAlloc IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError InitializeCriticalSectionAndSpinCount Sleep TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW GetProcAddress LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW IsValidCodePage GetOEMCP GetCurrentThreadId IsDebuggerPresent GetStdHandle GetFileType GetProcessHeap ReadFile ExitProcess GetModuleHandleExW HeapSize CloseHandle GetModuleFileNameA WriteFile QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW HeapReAlloc GetConsoleCP GetConsoleMode SetFilePointerEx LoadLibraryExW SetStdHandle FlushFileBuffers OutputDebugStringW

winhttp

WinHttpWriteData

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-12_48dbb2115afbe87aec9cfb5c8bffb260_elex_maze_rhadamanthys_smoke-loader_stop

kernel32

winhttp

generic