2026-09-30_813ece4f7cbe3f28726d322e816f67a1_amadey_elex_karagany_rhadamanthys_smoke-loader

General

Target
2026-09-30_813ece4f7cbe3f28726d322e816f67a1_amadey_elex_karagany_rhadamanthys_smoke-loader
Size 604KB
Sample260930-l3149avyh1
SHA256 d8e069d186f34674a28aeb9e372540993c9db320792917be234cf7433f7c9da1
MD5 813ece4f7cbe3f28726d322e816f67a1
SHA1 97f042ef4fa3410e4c8545dd2cdc19f2c17d2869
SHA512 d99a5d0fac8621aa184b050b3b8c14a8f310b4bf2ad49639d0628a9f42692dbaed6604e72009889b77621ce764eca4fd61db7cf89be14188d3ce90b2fc20f50e
SSDEEP 12288:+mUkI5QwbP3llGmsQLoJ/sxUC4uKQvXFDz1pqbkZEEO5:H+QwbNIpQLwsqaXF37qAZEE4
TLSH
T108D4F11076F1C034F6F716FA49F992A8693ABEB16B3481CF62D116EA55742E0EC30397
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-30_813ece4f7cbe3f28726d322e816f67a1_amadey_elex_karagany_rhadamanthys_smoke-loader

File Explorer

2026-09-30_813ece4f7cbe3f28726d322e816f67a1_amadey_elex_karagany_rhadamanthys_smoke-loader

.exe 604KB

2026-09-30_813ece4f7cbe3f28726d322e816f67a1_amadey_elex_karagany_rhadamanthys_smoke-loader

IMPHASH 1f3d09de0e7da5c165527f71e6a1c9ea
SHA256 d8e069d186f34674a28aeb9e372540993c9db320792917be234cf7433f7c9da1
MD5 813ece4f7cbe3f28726d322e816f67a1
SHA1 97f042ef4fa3410e4c8545dd2cdc19f2c17d2869
SHA512 d99a5d0fac8621aa184b050b3b8c14a8f310b4bf2ad49639d0628a9f42692dbaed6604e72009889b77621ce764eca4fd61db7cf89be14188d3ce90b2fc20f50e
SSDEEP 12288:+mUkI5QwbP3llGmsQLoJ/sxUC4uKQvXFDz1pqbkZEEO5:H+QwbNIpQLwsqaXF37qAZEE4
TLSH
T108D4F11076F1C034F6F716FA49F992A8693ABEB16B3481CF62D116EA55742E0EC30397
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

6544

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\bis\22\xusinebuvak79\l.pdb

kernel32

SetThreadContext FindFirstChangeNotificationW SetLocalTime GetConsoleAliasExesLengthA CallNamedPipeA InterlockedIncrement GetQueuedCompletionStatus CancelWaitableTimer UnlockFile SetEvent FreeEnvironmentStringsA GetModuleHandleW CreateNamedPipeW SetCommState GetPrivateProfileIntA GetSystemDirectoryW HeapDestroy CreateSemaphoreA TerminateProcess FileTimeToSystemTime GetModuleFileNameW lstrlenW InterlockedExchange GetStartupInfoA FreeLibraryAndExitThread OpenMutexW GetFileSize GetCurrentDirectoryW GetThreadLocale GetProcAddress SetStdHandle EnterCriticalSection LoadLibraryA LocalAlloc WritePrivateProfileStringA GetNumberFormatW GetProfileStringA SetThreadIdealProcessor HeapWalk FindAtomA GlobalWire FreeEnvironmentStringsW FindNextFileW WriteProfileStringW GetCPInfoExA SetFileShortNameA TlsAlloc EnumResourceLanguagesW GetSystemTime LCMapStringW CopyFileExA DeleteFileA GetVolumeInformationW GetLastError GetCommandLineW MoveFileA EncodePointer DecodePointer GetCommandLineA HeapSetInformation GetStartupInfoW HeapValidate IsBadReadPtr InterlockedDecrement ExitProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime GetModuleFileNameA WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsGetValue TlsSetValue TlsFree SetLastError HeapCreate WriteFile LeaveCriticalSection HeapAlloc HeapReAlloc HeapSize HeapQueryInformation HeapFree GetACP GetOEMCP GetCPInfo IsValidCodePage LoadLibraryW RtlUnwind SetFilePointer GetConsoleCP GetConsoleMode OutputDebugStringA WriteConsoleW OutputDebugStringW MultiByteToWideChar IsProcessorFeaturePresent GetStringTypeW CreateFileW CloseHandle FlushFileBuffers RaiseException

advapi32

InitiateSystemShutdownA

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-30_813ece4f7cbe3f28726d322e816f67a1_amadey_elex_karagany_rhadamanthys_smoke-loader

kernel32

advapi32

generic