2026-08-20_4b2a295e62e44e6d9a2a71b385ff881d_amadey_elex_rhadamanthys_smoke-loader

General

Target
2026-08-20_4b2a295e62e44e6d9a2a71b385ff881d_amadey_elex_rhadamanthys_smoke-loader
Size 56.6MB
Sample260820-gnmwvszhpc
SHA256 20a38d2aaa91f70f02125a686eea7c5bcff5f375503ac53fe4b5445996a9e31c
MD5 4b2a295e62e44e6d9a2a71b385ff881d
SHA1 375484d4bbfc8b43416c2888ddcbfb5acc20d178
SHA512 d82bc0c39b9ce18d0c58b5ec6b5262020ac18746341960a377ee1ca23f38edba3be9175a263a46787570a9e41faccf843cb80ad9da22dbaa1d28f88b6720b86f
SSDEEP 98304:a+JmuN1iWdfTyoWoe8Fbh7cdymJg80F8sSsoxpieREBnV+muasHGGfS00OSVTCV+:apWdLyo
TLSH
T1AED752C3F095894CFC9F5CB1123F8CA06FE6AEBA64D32C545246BA2245F3106959F92F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-20_4b2a295e62e44e6d9a2a71b385ff881d_amadey_elex_rhadamanthys_smoke-loader

File Explorer

2026-08-20_4b2a295e62e44e6d9a2a71b385ff881d_amadey_elex_rhadamanthys_smoke-loader

.exe 56.6MB

2026-08-20_4b2a295e62e44e6d9a2a71b385ff881d_amadey_elex_rhadamanthys_smoke-loader

IMPHASH 3a986b3b0e17bd538e6bfa3ee2f443b8
SHA256 20a38d2aaa91f70f02125a686eea7c5bcff5f375503ac53fe4b5445996a9e31c
MD5 4b2a295e62e44e6d9a2a71b385ff881d
SHA1 375484d4bbfc8b43416c2888ddcbfb5acc20d178
SHA512 d82bc0c39b9ce18d0c58b5ec6b5262020ac18746341960a377ee1ca23f38edba3be9175a263a46787570a9e41faccf843cb80ad9da22dbaa1d28f88b6720b86f
SSDEEP 98304:a+JmuN1iWdfTyoWoe8Fbh7cdymJg80F8sSsoxpieREBnV+muasHGGfS00OSVTCV+:apWdLyo
TLSH
T1AED752C3F095894CFC9F5CB1123F8CA06FE6AEBA64D32C545246BA2245F3106959F92F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

46079

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

SetMenu EndDialog IsDlgButtonChecked CheckDlgButton SetFocus LoadCursorA RegisterClassA ShowWindow GetMessageA TranslateMessage DispatchMessageA CreateMenu CreatePopupMenu AppendMenuA MessageBoxA CreateWindowExA PostQuitMessage DialogBoxParamA wsprintfA GetMenu EnableMenuItem DrawMenuBar DefWindowProcA GetDlgItemTextA GetDlgItem

advapi32

RegSetValueExA RegOpenKeyExA RegQueryValueExA RegCloseKey RegCreateKeyExA

ole32

CoInitializeEx CoUninitialize CoCreateInstance CoInitialize

kernel32

SetStdHandle GetLocaleInfoW InterlockedExchange GetOEMCP GetACP LoadLibraryA FlushFileBuffers GetSystemTimeAsFileTime GetCurrentProcessId GetCurrentThreadId GetTickCount QueryPerformanceCounter VirtualQuery GetSystemInfo VirtualProtect HeapSize CloseHandle SetFilePointer GetProcAddress GetStringTypeW GetStringTypeA IsValidCodePage IsValidLocale EnumSystemLocalesA GetLastError GetModuleFileNameA GetLocalTime GetModuleHandleA WideCharToMultiByte RtlUnwind RaiseException HeapFree GetStartupInfoA GetCommandLineA GetVersionExA HeapAlloc LCMapStringA MultiByteToWideChar LCMapStringW GetCPInfo ExitProcess TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter HeapDestroy HeapCreate VirtualFree VirtualAlloc HeapReAlloc IsBadWritePtr WriteFile GetStdHandle UnhandledExceptionFilter FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType IsBadReadPtr IsBadCodePtr GetUserDefaultLCID GetLocaleInfoA

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-20_4b2a295e62e44e6d9a2a71b385ff881d_amadey_elex_rhadamanthys_smoke-loader

user32

advapi32

ole32

kernel32

generic