2026-08-17_d69b0908da4bb064afc95006f86b9a21_amadey_elex_rhadamanthys_smoke-loader_stop_wapomi

General

Target
2026-08-17_d69b0908da4bb064afc95006f86b9a21_amadey_elex_rhadamanthys_smoke-loader_stop_wapomi
Size 84KB
Sample260817-b71zya1dlb
SHA256 9b7a95024d0c645a8e3de5d69f8e18eefda9c44ab5b7224f6a47c76e86750e59
MD5 d69b0908da4bb064afc95006f86b9a21
SHA1 bcbfabb2b554bbb6c5b3d71166921c76e85fa617
SHA512 834786aca6081a3889c27b06b07581d8574232b5e4a0ecae241587d16ff6dfee28a9c933baa47690fc0b2cd2ac3ec95a2715e08f5ea40052e30b6daa1506ad43
SSDEEP 1536:TVD5yVAHREc1780lHkRSy5zi5GCq2iW7z:TvVYSy5zyGCH
TLSH
T1AF837C6A3C93C077E04509718691C6D26FFFAD0336F7A06FFF95058A1E9228C46666F4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-17_d69b0908da4bb064afc95006f86b9a21_amadey_elex_rhadamanthys_smoke-loader_stop_wapomi

File Explorer

2026-08-17_d69b0908da4bb064afc95006f86b9a21_amadey_elex_rhadamanthys_smoke-loader_stop_wapomi

.exe 84KB

2026-08-17_d69b0908da4bb064afc95006f86b9a21_amadey_elex_rhadamanthys_smoke-loader_stop_wapomi

IMPHASH d62f11e36618ada0e0e06d1f10399ea7
SHA256 9b7a95024d0c645a8e3de5d69f8e18eefda9c44ab5b7224f6a47c76e86750e59
MD5 d69b0908da4bb064afc95006f86b9a21
SHA1 bcbfabb2b554bbb6c5b3d71166921c76e85fa617
SHA512 834786aca6081a3889c27b06b07581d8574232b5e4a0ecae241587d16ff6dfee28a9c933baa47690fc0b2cd2ac3ec95a2715e08f5ea40052e30b6daa1506ad43
SSDEEP 1536:TVD5yVAHREc1780lHkRSy5zi5GCq2iW7z:TvVYSy5zyGCH
TLSH
T1AF837C6A3C93C077E04509718691C6D26FFFAD0336F7A06FFF95058A1E9228C46666F4
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

73728

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

d:\Projects\インストーラ\121005(111024)EGL69専用\CommonUninstV2\release\EXECOPYV2.pdb

kernel32

GetVersionExA CreateMutexA CloseHandle GetLastError ReleaseMutex GetModuleFileNameA GetPrivateProfileStringA GetTempPathA SetFileAttributesA CreateProcessA GlobalAlloc GlobalLock CreateFileA GetFileSize SetFilePointer ReadFile WriteFile FlushFileBuffers GlobalUnlock GlobalFree GetCommandLineA HeapFree HeapAlloc GetProcessHeap GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetProcAddress GetModuleHandleA ExitProcess GetStdHandle FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapDestroy HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode EnterCriticalSection LeaveCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage Sleep LoadLibraryA InitializeCriticalSection VirtualAlloc HeapReAlloc RtlUnwind SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize

user32

MessageBoxA wsprintfA

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-17_d69b0908da4bb064afc95006f86b9a21_amadey_elex_rhadamanthys_smoke-loader_stop_wapomi

kernel32

user32

generic