2026-09-11_7623e5f4d5120718e5b7b507f21850f7_amadey_elex_rhadamanthys_smoke-loader_stop

General

Target
2026-09-11_7623e5f4d5120718e5b7b507f21850f7_amadey_elex_rhadamanthys_smoke-loader_stop
Size 166KB
Sample260912-krmxtasfjd
SHA256 d29326a998f5f84172fefa612eb329310b93c89fe2e43bc856532dd9be555122
MD5 7623e5f4d5120718e5b7b507f21850f7
SHA1 f5295bd961610f210fa731f4fc90c3a5166882d2
SHA512 41d99fc2281e5bbd9ac7ba8236502f4988079281cee760da9f467925e57b6dc00525211ad03438d20ff77a7bcc1a91f921ed5d12dee0ca72edbd7f33dcb379d4
SSDEEP 3072:SeB68C3SxEyR2hIzCyfWiGrKfRbluwAY+IbNZH3j1M6RUA3W:PB03oKQffWYfRblu9Y+IbNd3j1M6RK
TLSH
T19FF3E013B1E0C1B3E8B742742C31CE964A3B7C24AA71A1DF6B554A6E1E317D18D7931B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-11_7623e5f4d5120718e5b7b507f21850f7_amadey_elex_rhadamanthys_smoke-loader_stop

File Explorer

2026-09-11_7623e5f4d5120718e5b7b507f21850f7_amadey_elex_rhadamanthys_smoke-loader_stop

.exe 166KB

2026-09-11_7623e5f4d5120718e5b7b507f21850f7_amadey_elex_rhadamanthys_smoke-loader_stop

IMPHASH 57513dd26ea4e58e0be3aa201eb80230
SHA256 d29326a998f5f84172fefa612eb329310b93c89fe2e43bc856532dd9be555122
MD5 7623e5f4d5120718e5b7b507f21850f7
SHA1 f5295bd961610f210fa731f4fc90c3a5166882d2
SHA512 41d99fc2281e5bbd9ac7ba8236502f4988079281cee760da9f467925e57b6dc00525211ad03438d20ff77a7bcc1a91f921ed5d12dee0ca72edbd7f33dcb379d4
SSDEEP 3072:SeB68C3SxEyR2hIzCyfWiGrKfRbluwAY+IbNZH3j1M6RUA3W:PB03oKQffWYfRblu9Y+IbNd3j1M6RK
TLSH
T19FF3E013B1E0C1B3E8B742742C31CE964A3B7C24AA71A1DF6B554A6E1E317D18D7931B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

6155

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

EnableMenuItem CharPrevA CallWindowProcA CreateWindowExA DestroyWindow DispatchMessageA ExitWindowsEx SetRect LoadStringW RegisterClipboardFormatW UnregisterClassA ToUnicodeEx ValidateRect GetMessageTime IsMenu CharNextA IsWindowVisible MessageBoxA TranslateMessage SetWindowLongA PeekMessageA MsgWaitForMultipleObjects LoadStringA GetSystemMetrics

dbghelp

SymGetTypeFromName FindFileInPath SymRegisterCallback64 SymGetModuleBase FindFileInSearchPath ImagehlpApiVersion

kernel32

GetLastError VirtualQuery GetSystemInfo VirtualProtect UnhandledExceptionFilter GetCurrentProcess TerminateProcess GetLocaleInfoA GetStringTypeW GetStringTypeA LCMapStringW MultiByteToWideChar LCMapStringA HeapReAlloc VirtualAlloc Sleep HeapAlloc InitializeCriticalSection LoadLibraryExA CreateThread CreateEventA SetEvent CloseHandle CreateMutexA WaitForSingleObject IsBadWritePtr DefineDosDeviceA FatalAppExitA IsBadStringPtrA GetCommTimeouts SetFileApisToANSI GetSystemTimeAsFileTime RtlUnwind GetCommandLineA GetVersionExA GetStartupInfoA SetUnhandledExceptionFilter GetProcAddress GetModuleHandleA ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError InterlockedDecrement GetCurrentThreadId HeapDestroy HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetCPInfo GetACP GetOEMCP OutputDebugStringA LeaveCriticalSection EnterCriticalSection

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-11_7623e5f4d5120718e5b7b507f21850f7_amadey_elex_rhadamanthys_smoke-loader_stop

user32

dbghelp

kernel32

generic