2026-09-30_d315c1fc37f887830be7d231187a5ecc_amadey_elex_karagany_rhadamanthys_smoke-loader

General

Target
2026-09-30_d315c1fc37f887830be7d231187a5ecc_amadey_elex_karagany_rhadamanthys_smoke-loader
Size 606KB
Sample260930-jf6ecaydpa
SHA256 03e53bc8e7fff01f3c4d857dc4268fdad5817069e9f1ca6a327ba4191ac21aad
MD5 d315c1fc37f887830be7d231187a5ecc
SHA1 3c3ee93a49062bfd5a0d0091f5e6f414fc1f0dc7
SHA512 ffbd746fbc4173c74230b24a7a848cd60b036fad50d9f4f33e3ffcda9241f0c9232f5f670808ef6a65f782271448b16415e29becb7156249e4d36a3a21cabe08
SSDEEP 12288:G50dyoltrbcsOsbZ1ThG8DSVVUWc7yAa4OdMr5zkN/EMx0fVPG:mol9b0sbTldKcyAa4gkkNsMx7
TLSH
T1BFD4F110B7E0C035F6F322F949BA9379A92D7DB19B28C5CB63D116E666346E09C30397
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-30_d315c1fc37f887830be7d231187a5ecc_amadey_elex_karagany_rhadamanthys_smoke-loader

File Explorer

2026-09-30_d315c1fc37f887830be7d231187a5ecc_amadey_elex_karagany_rhadamanthys_smoke-loader

.exe 606KB

2026-09-30_d315c1fc37f887830be7d231187a5ecc_amadey_elex_karagany_rhadamanthys_smoke-loader

IMPHASH 9daab65a6dc440e386b70d6bb40ddc6e
SHA256 03e53bc8e7fff01f3c4d857dc4268fdad5817069e9f1ca6a327ba4191ac21aad
MD5 d315c1fc37f887830be7d231187a5ecc
SHA1 3c3ee93a49062bfd5a0d0091f5e6f414fc1f0dc7
SHA512 ffbd746fbc4173c74230b24a7a848cd60b036fad50d9f4f33e3ffcda9241f0c9232f5f670808ef6a65f782271448b16415e29becb7156249e4d36a3a21cabe08
SSDEEP 12288:G50dyoltrbcsOsbZ1ThG8DSVVUWc7yAa4OdMr5zkN/EMx0fVPG:mol9b0sbTldKcyAa4gkkNsMx7
TLSH
T1BFD4F110B7E0C035F6F322F949BA9379A92D7DB19B28C5CB63D116E666346E09C30397
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

6496

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\lisoberuwiju\tejo-pujegesohire-wuti.pdb

kernel32

GetThreadContext SetLocalTime InterlockedIncrement GetQueuedCompletionStatus UnlockFile SetEvent FreeEnvironmentStringsA GetModuleHandleW CreateNamedPipeW GetConsoleAliasesLengthA SetCommState GetCommandLineA GetPrivateProfileIntA GetSystemDirectoryW LoadLibraryW GetConsoleAliasExesLengthW HeapDestroy CreateSemaphoreA GetBinaryTypeA TerminateProcess lstrlenW LCMapStringA GetPrivateProfileIntW InterlockedExchange GetStartupInfoA GetStdHandle FreeLibraryAndExitThread OpenMutexW GetLastError GetCurrentDirectoryW GetThreadLocale GetProcAddress EnterCriticalSection LoadLibraryA LocalAlloc WritePrivateProfileStringA GetNumberFormatW GetProfileStringA SetThreadIdealProcessor HeapWalk FindAtomA SetSystemTime GlobalWire GetModuleFileNameA FindFirstChangeNotificationA FindNextFileW WriteProfileStringW GetCPInfoExA SetFileShortNameA TlsAlloc EnumResourceLanguagesW CopyFileExA DeleteFileA GetVolumeInformationW LocalFileTimeToFileTime MoveFileA EncodePointer DecodePointer HeapSetInformation GetStartupInfoW InterlockedDecrement ExitProcess HeapValidate IsBadReadPtr GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsGetValue TlsSetValue TlsFree SetLastError HeapCreate WriteFile GetACP GetOEMCP GetCPInfo IsValidCodePage LeaveCriticalSection RtlUnwind HeapAlloc HeapReAlloc HeapSize HeapQueryInformation HeapFree SetFilePointer GetConsoleCP GetConsoleMode OutputDebugStringA WriteConsoleW OutputDebugStringW MultiByteToWideChar IsProcessorFeaturePresent LCMapStringW GetStringTypeW SetStdHandle CreateFileW CloseHandle FlushFileBuffers RaiseException

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-30_d315c1fc37f887830be7d231187a5ecc_amadey_elex_karagany_rhadamanthys_smoke-loader

kernel32

generic