2026-09-29_251864bbb101c9fb707d92dbd661055d_amadey_elex_karagany_rhadamanthys_smoke-loader

General

Target
2026-09-29_251864bbb101c9fb707d92dbd661055d_amadey_elex_karagany_rhadamanthys_smoke-loader
Size 713KB
Sample260930-evd67a113j
SHA256 a60ee2463517a74229664870244c9505e5430a79af0ee05be77c86790ca25f30
MD5 251864bbb101c9fb707d92dbd661055d
SHA1 04a83761a599097160d3db10d2d87bf54cb916e7
SHA512 9ee0797ad9029c9a24ab95021e8570526dc3565031912bba2b64547a5b7feee0bdd286aa80dfe721f5b2d2ea4727025f320d984d775eed5fefad8795f3c50ead
SSDEEP 12288:GVy0GHSwP1/LwmyG3uO0/Qp7IkRlLNNHfTgY3Blan0GcSlf5eNQY:XHj1/BuO0/Q51r5N3G0dKBsQY
TLSH
T1F1F402207BD0C035F1B722F959FA5779652DBEB0273495CBA3D10AEA56B06E09C30397
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-29_251864bbb101c9fb707d92dbd661055d_amadey_elex_karagany_rhadamanthys_smoke-loader

File Explorer

2026-09-29_251864bbb101c9fb707d92dbd661055d_amadey_elex_karagany_rhadamanthys_smoke-loader

.exe 713KB

2026-09-29_251864bbb101c9fb707d92dbd661055d_amadey_elex_karagany_rhadamanthys_smoke-loader

IMPHASH 2def91c0581afe8a9028a470a8151c40
SHA256 a60ee2463517a74229664870244c9505e5430a79af0ee05be77c86790ca25f30
MD5 251864bbb101c9fb707d92dbd661055d
SHA1 04a83761a599097160d3db10d2d87bf54cb916e7
SHA512 9ee0797ad9029c9a24ab95021e8570526dc3565031912bba2b64547a5b7feee0bdd286aa80dfe721f5b2d2ea4727025f320d984d775eed5fefad8795f3c50ead
SSDEEP 12288:GVy0GHSwP1/LwmyG3uO0/Qp7IkRlLNNHfTgY3Blan0GcSlf5eNQY:XHj1/BuO0/Q51r5N3G0dKBsQY
TLSH
T1F1F402207BD0C035F1B722F959FA5779652DBEB0273495CBA3D10AEA56B06E09C30397
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

7104

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\todapicuj\sefo\tacokixudoc59_cucutetozoma\v.pdb

kernel32

FindResourceExW InterlockedIncrement GetCommState InterlockedDecrement UnlockFile SetEvent FreeEnvironmentStringsA CreateNamedPipeW GetConsoleAliasesLengthA GetCommandLineA GetPrivateProfileIntA LoadLibraryW GetConsoleAliasExesLengthW HeapDestroy CreateSemaphoreA GetBinaryTypeA TerminateProcess GetSystemDirectoryA lstrlenW LCMapStringA GetPrivateProfileIntW InterlockedExchange GetStartupInfoA GetStdHandle GetCPInfoExW FreeLibraryAndExitThread OpenMutexW GetLastError SetLocalTime GetThreadLocale GetProcAddress EnterCriticalSection LoadLibraryA LocalAlloc WritePrivateProfileStringA GetNumberFormatW GetProfileStringA SetThreadIdealProcessor HeapWalk FindAtomA SetSystemTime GlobalWire GetModuleFileNameA CreateIoCompletionPort GetModuleHandleA FindFirstChangeNotificationA FindNextFileW WriteProfileStringW SetFileShortNameA TlsAlloc EnumResourceLanguagesW UnregisterWaitEx CopyFileExA DeleteFileA GetVolumeInformationW LocalFileTimeToFileTime GetCurrentDirectoryW GetThreadContext EncodePointer DecodePointer HeapSetInformation GetStartupInfoW LeaveCriticalSection SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW GetModuleHandleW ExitProcess HeapValidate IsBadReadPtr QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW TlsGetValue TlsSetValue TlsFree SetLastError HeapCreate WriteFile SetFilePointer GetConsoleCP GetConsoleMode OutputDebugStringA WriteConsoleW OutputDebugStringW RtlUnwind GetACP GetOEMCP GetCPInfo IsValidCodePage HeapAlloc HeapReAlloc HeapSize HeapQueryInformation HeapFree MultiByteToWideChar IsProcessorFeaturePresent FlushFileBuffers SetStdHandle LCMapStringW GetStringTypeW CloseHandle CreateFileW RaiseException

advapi32

AbortSystemShutdownA

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-29_251864bbb101c9fb707d92dbd661055d_amadey_elex_karagany_rhadamanthys_smoke-loader

kernel32

advapi32

generic