2026-08-30_7b542ee49f3aba8f67def4a98a8247c0_amadey_elex_gh0st_rhadamanthys_smoke-loader_stop

General

Target
2026-08-30_7b542ee49f3aba8f67def4a98a8247c0_amadey_elex_gh0st_rhadamanthys_smoke-loader_stop
Size 389KB
Sample260831-lazeysff39
SHA256 a031abcf6032439af76a2b2b4b6408d5d1ec86e127de203c7ecb7d9a5fde9150
MD5 7b542ee49f3aba8f67def4a98a8247c0
SHA1 4597131e798d92dc4b87fe57b399d389c2a54890
SHA512 1d811960b99a26e90d9e4b615f27cb61c70f54b4c2493cc4fe067f87825e70f01458db9b172478939e812497738fc285a1d73cd16c8c5d5e1acd6ceae213a0ae
SSDEEP 6144:+tMlKJczLLI3cI1zGMvH9M+UMB3ZQYcmoTAAuIyPO7tmxClyhlG:+t8KJczsJ9MKJpcmoTAmy2xByh
TLSH
T13A848D11B5D0C072D4A31535586EC7B29B7D78321BBA95CBBBC44AB95F202D2AB3930F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-30_7b542ee49f3aba8f67def4a98a8247c0_amadey_elex_gh0st_rhadamanthys_smoke-loader_stop

File Explorer

2026-08-30_7b542ee49f3aba8f67def4a98a8247c0_amadey_elex_gh0st_rhadamanthys_smoke-loader_stop

.exe 389KB

2026-08-30_7b542ee49f3aba8f67def4a98a8247c0_amadey_elex_gh0st_rhadamanthys_smoke-loader_stop

IMPHASH 5dd37bb7bc925dab894ca2c7a64069c0
SHA256 a031abcf6032439af76a2b2b4b6408d5d1ec86e127de203c7ecb7d9a5fde9150
MD5 7b542ee49f3aba8f67def4a98a8247c0
SHA1 4597131e798d92dc4b87fe57b399d389c2a54890
SHA512 1d811960b99a26e90d9e4b615f27cb61c70f54b4c2493cc4fe067f87825e70f01458db9b172478939e812497738fc285a1d73cd16c8c5d5e1acd6ceae213a0ae
SSDEEP 6144:+tMlKJczLLI3cI1zGMvH9M+UMB3ZQYcmoTAAuIyPO7tmxClyhlG:+t8KJczsJ9MKJpcmoTAmy2xByh
TLSH
T13A848D11B5D0C072D4A31535586EC7B29B7D78321BBA95CBBBC44AB95F202D2AB3930F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

29266

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

OpenProcessToken GetTokenInformation

shell32

SHGetFolderPathW

kernel32

SetEnvironmentVariableA CompareStringW GetCurrentProcess GetProcAddress GetModuleHandleW GetVersionExW CloseHandle Process32NextW Process32FirstW CreateToolhelp32Snapshot WaitForSingleObject CreateRemoteThread VirtualFreeEx GetModuleHandleA WriteProcessMemory VirtualAllocEx OpenProcess LoadLibraryW GetConsoleWindow GetTempFileNameW GetTempPathW FreeLibrary GetModuleFileNameW GetLastError DeleteFileW WriteFile CreateFileW SizeofResource LockResource LoadResource FindResourceW VirtualProtectEx RtlUnwind RaiseException TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId GetCurrentThread HeapFree EnterCriticalSection LeaveCriticalSection WideCharToMultiByte GetConsoleCP GetConsoleMode HeapAlloc Sleep ExitProcess GetStdHandle GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate HeapDestroy VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW FatalAppExitA GetTimeFormatA GetDateFormatA GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale VirtualAlloc HeapReAlloc SetStdHandle FlushFileBuffers SetFilePointer WriteConsoleA GetConsoleOutputCP WriteConsoleW InitializeCriticalSectionAndSpinCount HeapSize SetConsoleCtrlHandler InterlockedExchange LoadLibraryA GetTimeZoneInformation CreateFileA SetEndOfFile GetProcessHeap ReadFile GetLocaleInfoW CompareStringA

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-30_7b542ee49f3aba8f67def4a98a8247c0_amadey_elex_gh0st_rhadamanthys_smoke-loader_stop

advapi32

shell32

kernel32

generic