2026-09-30_986417de1729a9448a25bed7fbae7d58_amadey_elex_rhadamanthys_smoke-loader_stop

General

Target
2026-09-30_986417de1729a9448a25bed7fbae7d58_amadey_elex_rhadamanthys_smoke-loader_stop
Size 177KB
Sample260930-lcjsaaszfs
SHA256 11af9d9afedd3e7c6f3663766142655fb21c31f9766458506e0c5708ef4efe95
MD5 986417de1729a9448a25bed7fbae7d58
SHA1 64b8c6281bc24842b8f66150e8296b4c16e6bb61
SHA512 5344a2db8da5ea78f8034115f9bf3f537a49cc61a90e996c7763a9f9dc238704816c4c05e6b42eb69770f8e32c35586c14de8f8ea08e6f3702ce0be41ad1bc29
SSDEEP 3072:6K7H8FOEdJ5E07gBG5KEd05H5JQOQsWvKCw41IAS:PJ+5ENcKEg6K141IA
TLSH
T1C0049D1036F0C472C8B61D305864CBB05A7AF87159A0D69BB794BBBE2F343F19A76346
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-30_986417de1729a9448a25bed7fbae7d58_amadey_elex_rhadamanthys_smoke-loader_stop

File Explorer

2026-09-30_986417de1729a9448a25bed7fbae7d58_amadey_elex_rhadamanthys_smoke-loader_stop

.exe 177KB

2026-09-30_986417de1729a9448a25bed7fbae7d58_amadey_elex_rhadamanthys_smoke-loader_stop

IMPHASH 1f1778a50f9b54ca062656e19d05039f
SHA256 11af9d9afedd3e7c6f3663766142655fb21c31f9766458506e0c5708ef4efe95
MD5 986417de1729a9448a25bed7fbae7d58
SHA1 64b8c6281bc24842b8f66150e8296b4c16e6bb61
SHA512 5344a2db8da5ea78f8034115f9bf3f537a49cc61a90e996c7763a9f9dc238704816c4c05e6b42eb69770f8e32c35586c14de8f8ea08e6f3702ce0be41ad1bc29
SSDEEP 3072:6K7H8FOEdJ5E07gBG5KEd05H5JQOQsWvKCw41IAS:PJ+5ENcKEg6K141IA
TLSH
T1C0049D1036F0C472C8B61D305864CBB05A7AF87159A0D69BB794BBBE2F343F19A76346
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8741

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\sif.pdb

kernel32

GetCurrentProcess GetSystemWindowsDirectoryW GetUserDefaultLCID GetSystemDefaultLCID ReadConsoleW GetEnvironmentStrings GetLocaleInfoW LeaveCriticalSection FindNextVolumeW WriteConsoleW GetModuleFileNameW GetACP VerifyVersionInfoW InterlockedExchange Module32First GetProcAddress EnterCriticalSection PrepareTape ResetEvent GetAtomNameA LocalAlloc SetConsoleTitleW GetModuleHandleA GetCurrentProcessId AddConsoleAliasA FindActCtxSectionStringW GetSystemTime GetProfileSectionW GetLocaleInfoA FindActCtxSectionGuid GetConsoleOutputCP GetCommandLineW HeapAlloc GetCommandLineA GetStartupInfoA TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId GetLastError InterlockedDecrement DeleteCriticalSection HeapFree VirtualFree VirtualAlloc HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA HeapSize RtlUnwind SetHandleCount GetFileType SetFilePointer CloseHandle FreeEnvironmentStringsA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode GetCPInfo GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount LoadLibraryA CreateFileA RaiseException SetStdHandle FlushFileBuffers WriteConsoleA MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW SetEndOfFile GetProcessHeap ReadFile

gdi32

GetCharWidthFloatA

advapi32

BackupEventLogA

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-30_986417de1729a9448a25bed7fbae7d58_amadey_elex_rhadamanthys_smoke-loader_stop

kernel32

gdi32

advapi32

generic