2026-08-16_4d61cb3e56d5a7da3001c7455c2c004f_amadey_elex_rhadamanthys_smoke-loader_stop

General

Target
2026-08-16_4d61cb3e56d5a7da3001c7455c2c004f_amadey_elex_rhadamanthys_smoke-loader_stop
Size 14.6MB
Sample260816-e97gaaz1cx
SHA256 051a1e249fe003dd42f67695e22f1afe88f2c289628c819ef2edac259026a276
MD5 4d61cb3e56d5a7da3001c7455c2c004f
SHA1 062d516557a7e3ed0e58438ef94262293d4ab8a1
SHA512 45d9e84b38f59ddd64a18488e88e7afe33c20ef51a7562336816bc4b9c25155a37d4da3bce1499caf6dd5045e31c67cf8c78e09b5d9a102f8ed3b5fbf8892d9c
SSDEEP 6144:4LhlC8DmKmVJOu8XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX:4dlpDQ
TLSH
T1A6F6299166F6EC42F3FB0E7079B66A442E33FD93BA74839E1550150A6E322E1DD61B03
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-16_4d61cb3e56d5a7da3001c7455c2c004f_amadey_elex_rhadamanthys_smoke-loader_stop

File Explorer

2026-08-16_4d61cb3e56d5a7da3001c7455c2c004f_amadey_elex_rhadamanthys_smoke-loader_stop

.exe 14.6MB

2026-08-16_4d61cb3e56d5a7da3001c7455c2c004f_amadey_elex_rhadamanthys_smoke-loader_stop

IMPHASH db90a3f05c1cd3f6e062688ec95242c9
SHA256 051a1e249fe003dd42f67695e22f1afe88f2c289628c819ef2edac259026a276
MD5 4d61cb3e56d5a7da3001c7455c2c004f
SHA1 062d516557a7e3ed0e58438ef94262293d4ab8a1
SHA512 45d9e84b38f59ddd64a18488e88e7afe33c20ef51a7562336816bc4b9c25155a37d4da3bce1499caf6dd5045e31c67cf8c78e09b5d9a102f8ed3b5fbf8892d9c
SSDEEP 6144:4LhlC8DmKmVJOu8XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX:4dlpDQ
TLSH
T1A6F6299166F6EC42F3FB0E7079B66A442E33FD93BA74839E1550150A6E322E1DD61B03
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

4591

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumResourceNamesW SearchPathW SetPriorityClass SetFilePointer LoadResource SetUnhandledExceptionFilter InterlockedIncrement _lwrite ReadConsoleA CompareFileTime SetDefaultCommConfigW OpenSemaphoreA ConnectNamedPipe CallNamedPipeW SetTapeParameters GetProcessPriorityBoost GetModuleHandleW IsBadReadPtr SetCommState GlobalAlloc Sleep CopyFileW GetPrivateProfileStructW SetSystemTimeAdjustment FileTimeToDosDateTime GetACP lstrlenW FreeLibraryAndExitThread SetLastError GetProcAddress SetStdHandle SetFileApisToOEM GetLocalTime LoadLibraryA BuildCommDCBAndTimeoutsW IsSystemResumeAutomatic WaitForMultipleObjects SetEnvironmentVariableA lstrcatW FreeEnvironmentStringsW GetCurrentDirectoryA FindAtomW GetProfileSectionW lstrcpyA GetFileAttributesA ExitProcess GetLastError MoveFileA GetStartupInfoW WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent GetCPInfo GetOEMCP IsValidCodePage LeaveCriticalSection EnterCriticalSection InitializeCriticalSectionAndSpinCount HeapAlloc VirtualAlloc HeapReAlloc RtlUnwind LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize GetModuleHandleA RaiseException

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-16_4d61cb3e56d5a7da3001c7455c2c004f_amadey_elex_rhadamanthys_smoke-loader_stop

kernel32

generic