2026-08-24_2e978f1b2937a37737c8ca019751fdc4_amadey_elex_rhadamanthys_smoke-loader

General

Target
2026-08-24_2e978f1b2937a37737c8ca019751fdc4_amadey_elex_rhadamanthys_smoke-loader
Size 1.5MB
Sample260825-ttdxcsstbv
SHA256 ced6a3445d925b49e4453dd78fc3d8a60e765c0c58726c08f98c46c97508c7ac
MD5 2e978f1b2937a37737c8ca019751fdc4
SHA1 732ab43778cb89ef7dccb311df8d122e722b4615
SHA512 fc5fe500b427030d3babf7361e6f17d33fbc4f247c6c26e7896b9ab81379db9165fb3d356911a4769e6928469f470d80902ceab150d1b5c782f66f70152f7560
SSDEEP 12288:RN3qxrsIf8fEXzqDCDh5tn0L4QXqZhvn65BKnU1VwhqDI7HNcuzB/1:RNi1RDqDohDn0L4lZhvnYB2U1VwAkz
TLSH
T1AF7522913210D075F06194B5C599DAF59672BC42CEE28AC3BFD43F6F7BBA6C49E22102
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-24_2e978f1b2937a37737c8ca019751fdc4_amadey_elex_rhadamanthys_smoke-loader

File Explorer

2026-08-24_2e978f1b2937a37737c8ca019751fdc4_amadey_elex_rhadamanthys_smoke-loader

.exe 1.5MB

2026-08-24_2e978f1b2937a37737c8ca019751fdc4_amadey_elex_rhadamanthys_smoke-loader

IMPHASH 56b532d990352eed2d2473aa1275604b
SHA256 ced6a3445d925b49e4453dd78fc3d8a60e765c0c58726c08f98c46c97508c7ac
MD5 2e978f1b2937a37737c8ca019751fdc4
SHA1 732ab43778cb89ef7dccb311df8d122e722b4615
SHA512 fc5fe500b427030d3babf7361e6f17d33fbc4f247c6c26e7896b9ab81379db9165fb3d356911a4769e6928469f470d80902ceab150d1b5c782f66f70152f7560
SSDEEP 12288:RN3qxrsIf8fEXzqDCDh5tn0L4QXqZhvn65BKnU1VwhqDI7HNcuzB/1:RNi1RDqDohDn0L4lZhvnYB2U1VwAkz
TLSH
T1AF7522913210D075F06194B5C599DAF59672BC42CEE28AC3BFD43F6F7BBA6C49E22102
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

22630

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetProcAddress LoadLibraryA GetModuleFileNameA GetModuleHandleA QueryPerformanceCounter SetConsoleCtrlHandler FindClose FindFirstFileA FindNextFileA OutputDebugStringA OpenEventA SetEvent QueryPerformanceFrequency CloseHandle HeapFree ExitProcess TerminateProcess GetCurrentProcess HeapAlloc EnterCriticalSection LeaveCriticalSection GetCommandLineA GetVersionExA HeapDestroy HeapCreate VirtualFree DeleteCriticalSection VirtualAlloc HeapReAlloc SetStdHandle GetLastError GetFileType WriteFile SetHandleCount GetStdHandle GetStartupInfoA ReadFile WideCharToMultiByte TlsAlloc SetLastError GetCurrentThreadId TlsFree TlsSetValue TlsGetValue SetFilePointer UnhandledExceptionFilter FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW InitializeCriticalSection RtlUnwind InterlockedExchange VirtualQuery HeapSize FlushFileBuffers CreateFileA CompareStringA MultiByteToWideChar GetCPInfo CompareStringW GetACP GetOEMCP SetEnvironmentVariableA GetStringTypeA GetStringTypeW GetLocaleInfoA GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetEndOfFile VirtualProtect GetSystemInfo LCMapStringA LCMapStringW GetTimeZoneInformation FileTimeToSystemTime FileTimeToLocalFileTime GetDriveTypeA GetFileAttributesA GetFullPathNameA GetCurrentDirectoryA SetEnvironmentVariableW

advapi32

RegCloseKey RegQueryValueExA RegOpenKeyExA

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-24_2e978f1b2937a37737c8ca019751fdc4_amadey_elex_rhadamanthys_smoke-loader

kernel32

advapi32

generic