2026-09-30_c0ef94225116a8f09c45a4f2c8f211c5_amadey_elex_rhadamanthys_smoke-loader_stop

General

Target
2026-09-30_c0ef94225116a8f09c45a4f2c8f211c5_amadey_elex_rhadamanthys_smoke-loader_stop
Size 494KB
Sample260930-jykwcsxt2q
SHA256 b3c046d2bc27f2cc449f7019445756b4a1da4cfc76fa9f8a1d729348172169e1
MD5 c0ef94225116a8f09c45a4f2c8f211c5
SHA1 601dc534f03a2862ce4d59fa7edc40dff2a1581f
SHA512 6629cbce42844332bfc828772ceaca45fcd943dbea242ddb82e4ba98381de6709536ae7f1fe32841b730a1109605125d3a2f3b757acb6d2ee8537f18079f66d5
SSDEEP 12288:DZhUnRtCUXZbnfg1m6mXHln7+JT3onKGB+XARfhCJNrM:DvERj1D62Hh445bDSN
TLSH
T1BFB4E120A7A0C038E5F712F959F893A8B52D7DB14B3051CBA2E626FE52347E49C31767
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-30_c0ef94225116a8f09c45a4f2c8f211c5_amadey_elex_rhadamanthys_smoke-loader_stop

File Explorer

2026-09-30_c0ef94225116a8f09c45a4f2c8f211c5_amadey_elex_rhadamanthys_smoke-loader_stop

.exe 494KB

2026-09-30_c0ef94225116a8f09c45a4f2c8f211c5_amadey_elex_rhadamanthys_smoke-loader_stop

IMPHASH 1bd6d269463cc591268b8d14694f5ae5
SHA256 b3c046d2bc27f2cc449f7019445756b4a1da4cfc76fa9f8a1d729348172169e1
MD5 c0ef94225116a8f09c45a4f2c8f211c5
SHA1 601dc534f03a2862ce4d59fa7edc40dff2a1581f
SHA512 6629cbce42844332bfc828772ceaca45fcd943dbea242ddb82e4ba98381de6709536ae7f1fe32841b730a1109605125d3a2f3b757acb6d2ee8537f18079f66d5
SSDEEP 12288:DZhUnRtCUXZbnfg1m6mXHln7+JT3onKGB+XARfhCJNrM:DvERj1D62Hh445bDSN
TLSH
T1BFB4E120A7A0C038E5F712F959F893A8B52D7DB14B3051CBA2E626FE52347E49C31767
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\woroxozun cape\zivoyufodipuro\jiluyupuwupe\jowuniw-78\j.pdb

kernel32

GetCommandLineW GetThreadContext UnregisterWait DosDateTimeToFileTime FindFirstChangeNotificationW CopyFileExW CallNamedPipeA HeapAlloc SetWaitableTimer InterlockedIncrement InterlockedDecrement GlobalLock GetProfileStringW FreeEnvironmentStringsA CreateNamedPipeW LocalFlags SetCommState SetProcessPriorityBoost GetSystemTimes ActivateActCtx GlobalAlloc GetPrivateProfileIntA GetSystemDirectoryW GetVolumeInformationA LoadLibraryW TerminateThread LeaveCriticalSection VerifyVersionInfoA IsDBCSLeadByte GetCompressedFileSizeA lstrlenW LCMapStringA InterlockedExchange GetStartupInfoA SetThreadLocale GetCPInfoExW GetLastError SetLastError GetProcAddress SetStdHandle DisableThreadLibraryCalls LoadLibraryA WritePrivateProfileStringA FindAtomA GetModuleFileNameA GetThreadPriority CreateIoCompletionPort GetModuleHandleA QueryMemoryResourceNotification HeapSetInformation FreeEnvironmentStringsW FindNextFileW WriteProfileStringW GetCurrentDirectoryA GetCurrentThreadId TlsAlloc LocalSize EnumResourceLanguagesW GetSystemTime GetProfileSectionW GetStartupInfoW HeapValidate IsBadReadPtr RaiseException EnterCriticalSection GetFileType WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode GetModuleHandleW Sleep ExitProcess TlsGetValue TlsSetValue TlsFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW RtlUnwind GetACP GetOEMCP GetCPInfo IsValidCodePage DeleteCriticalSection QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW SetHandleCount GetStdHandle HeapDestroy HeapCreate HeapFree VirtualFree HeapSize HeapReAlloc VirtualAlloc InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar SetFilePointer GetStringTypeA GetStringTypeW GetLocaleInfoA DebugBreak OutputDebugStringA OutputDebugStringW LCMapStringW CreateFileA CloseHandle FlushFileBuffers

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-30_c0ef94225116a8f09c45a4f2c8f211c5_amadey_elex_rhadamanthys_smoke-loader_stop

kernel32

generic