2026-08-24_8e8c718b1b1de0570f0b07c6da54f334_amadey_elex_rhadamanthys_smoke-loader_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-24_8e8c718b1b1de0570f0b07c6da54f334_amadey_elex_rhadamanthys_smoke-loader_stop
Size 965KB
Sample260825-jndpasvtbz
SHA256 978e1048841bb05e467ce89b025a45873c9ca1605815e49effd4b3dcf378f25f
MD5 8e8c718b1b1de0570f0b07c6da54f334
SHA1 c6ffba3fe8c9e8828a7e0f4e99d0c0a6c09c4f86
SHA512 6a91593cdc7ae9d09eb6158ee92b514962c7fd86973dbb856affdb4115b32b807d9d139bfc6116d612629cbfe7090e98e980ded2a8d7f76d8290c0f5deb07d86
SSDEEP 24576:8l7rFE22Hdqj4NkfJ4yL/tNCJPXUQrP/:L229qEyfJ4klKXnH
TLSH
T10E25F120BBE5C136EAB73B3518B4836D553ABCA46B30D6CBA7441B1E5D706C2EC74326
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-24_8e8c718b1b1de0570f0b07c6da54f334_amadey_elex_rhadamanthys_smoke-loader_stop

File Explorer

2026-08-24_8e8c718b1b1de0570f0b07c6da54f334_amadey_elex_rhadamanthys_smoke-loader_stop

.exe 965KB

2026-08-24_8e8c718b1b1de0570f0b07c6da54f334_amadey_elex_rhadamanthys_smoke-loader_stop

IMPHASH a8c62a2ea232e2df9c151461ad8ab805
SHA256 978e1048841bb05e467ce89b025a45873c9ca1605815e49effd4b3dcf378f25f
MD5 8e8c718b1b1de0570f0b07c6da54f334
SHA1 c6ffba3fe8c9e8828a7e0f4e99d0c0a6c09c4f86
SHA512 6a91593cdc7ae9d09eb6158ee92b514962c7fd86973dbb856affdb4115b32b807d9d139bfc6116d612629cbfe7090e98e980ded2a8d7f76d8290c0f5deb07d86
SSDEEP 24576:8l7rFE22Hdqj4NkfJ4yL/tNCJPXUQrP/:L229qEyfJ4klKXnH
TLSH
T10E25F120BBE5C136EAB73B3518B4836D553ABCA46B30D6CBA7441B1E5D706C2EC74326
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

111070

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\dvs\p4\build\sw\rel\gpu_drv\installer_core\Build\Core\Out\Win32\Release\setup.pdb

kernel32

SetErrorMode CloseHandle FreeLibrary GetModuleFileNameW GetProcAddress LoadLibraryW MultiByteToWideChar GetCurrentProcess GetCurrentDirectoryW GetTempPathW GetSystemDirectoryW GetFileAttributesW CreateEventW CreateDirectoryW SetCurrentDirectoryW GetTickCount ExpandEnvironmentStringsW GetModuleHandleA GetModuleHandleW GetSystemInfo CreateFileA InterlockedIncrement InterlockedDecrement SetLastError DebugBreak Sleep IsDebuggerPresent EnterCriticalSection LeaveCriticalSection GetVersionExW LocalFree FormatMessageW GetLastError InitializeCriticalSection DeleteCriticalSection WideCharToMultiByte FindResourceExW FindResourceW LoadResource LockResource SizeofResource FlushFileBuffers WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle GetStringTypeW GetStringTypeA LCMapStringA GetLocaleInfoA GetConsoleMode GetConsoleCP SetFilePointer InitializeCriticalSectionAndSpinCount LCMapStringW GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter GetStartupInfoA GetFileType SetHandleCount GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW IsValidCodePage GetOEMCP GetACP GetCPInfo GetModuleFileNameA GetStdHandle WriteFile HeapCreate RaiseException HeapDestroy HeapAlloc HeapFree HeapReAlloc HeapSize GetProcessHeap FormatMessageA GetStartupInfoW RtlUnwind LoadLibraryA TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId ExitProcess VirtualFree VirtualAlloc

user32

MessageBoxW

advapi32

LsaNtStatusToWinError RegOpenCurrentUser RegEnumValueW RegDeleteValueW RegQueryValueExW RegSetValueExW RegCreateKeyExW RegOpenKeyExW RegEnumKeyExW RegQueryInfoKeyW RegDeleteKeyW RegCloseKey

ole32

CoInitializeSecurity CoUninitialize CoInitializeEx

oleaut32

SafeArrayUnlock VariantInit SafeArrayDestroy SysStringLen VariantChangeType SysAllocStringLen SysAllocString SysFreeString SafeArrayLock SafeArrayGetVartype SafeArrayGetUBound SafeArrayGetLBound SafeArrayCopy SafeArrayCreate VariantClear

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-24_8e8c718b1b1de0570f0b07c6da54f334_amadey_elex_rhadamanthys_smoke-loader_stop

kernel32

user32

advapi32

ole32

oleaut32

generic