2026-08-21_098c45e0b146bd26b2186f35a7659d5f_amadey_elex_remcos_rhadamanthys_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-21_098c45e0b146bd26b2186f35a7659d5f_amadey_elex_remcos_rhadamanthys_smoke-loader
Size 696KB
Sample260822-x545gattcx
SHA256 f88820705f8b6577085b0b458944c78ba1861ff10221094ec283a45af94b302c
MD5 098c45e0b146bd26b2186f35a7659d5f
SHA1 00a9b0ca20bbc2034825463e06738d54b229866c
SHA512 3fa17dbbb1b27594b24b4307a87ad60fbf85db37fc12dd8f0f4007feb621e31e6b21893c020373055fe3c80d3e1260c34a84f091cb9d5381aaef0b3aba5abbc4
SSDEEP 12288:OwBhHmq7dq93QKqZwe/8DU/V6YO7d4fWO9MTJDlZnzq:OYHI93Rq/uaO7d3O9MTJ
TLSH
T1DBE4F11672C19273E09311321B0BC3A67D3A3D355B2A59C772D8327D6E716C1AAFA327
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-21_098c45e0b146bd26b2186f35a7659d5f_amadey_elex_remcos_rhadamanthys_smoke-loader

File Explorer

2026-08-21_098c45e0b146bd26b2186f35a7659d5f_amadey_elex_remcos_rhadamanthys_smoke-loader

.exe 696KB

2026-08-21_098c45e0b146bd26b2186f35a7659d5f_amadey_elex_remcos_rhadamanthys_smoke-loader

SHA256 f88820705f8b6577085b0b458944c78ba1861ff10221094ec283a45af94b302c
MD5 098c45e0b146bd26b2186f35a7659d5f
SHA1 00a9b0ca20bbc2034825463e06738d54b229866c
SHA512 3fa17dbbb1b27594b24b4307a87ad60fbf85db37fc12dd8f0f4007feb621e31e6b21893c020373055fe3c80d3e1260c34a84f091cb9d5381aaef0b3aba5abbc4
SSDEEP 12288:OwBhHmq7dq93QKqZwe/8DU/V6YO7d4fWO9MTJDlZnzq:OYHI93Rq/uaO7d3O9MTJ
TLSH
T1DBE4F11672C19273E09311321B0BC3A67D3A3D355B2A59C772D8327D6E716C1AAFA327
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

196225

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

248KB

Virtual Size

248KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

CODE

Size

334KB

Virtual Size

334KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

49KB

Virtual Size

49KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-21_098c45e0b146bd26b2186f35a7659d5f_amadey_elex_remcos_rhadamanthys_smoke-loader

generic