2026-09-30_8398230158f116c7d759c4c97c37eca9_amadey_elex_rhadamanthys_smoke-loader_stop

General

Target
2026-09-30_8398230158f116c7d759c4c97c37eca9_amadey_elex_rhadamanthys_smoke-loader_stop
Size 592KB
Sample260930-lzt7jayajb
SHA256 c957bb25fb195d8f0f01fb882b2b3aa8814ae70ce6e4df36925bf8cd3dec6381
MD5 8398230158f116c7d759c4c97c37eca9
SHA1 96295f55552ae8df7bc236ecaba0ed2937844cd4
SHA512 c5b9306d461f79cfa2243e26a4eecdaee3e3a5f016cf45f30f5c37c8c71ebfca63d85d43e97c58a1cb633044de6e3bb4435fec0bf1143da340bcfbea7cc130f5
SSDEEP 12288:q8ns86B8LEvFTGTEPGtMvECqLDhhxcSHSVT9cRs0AuvOmaU+:qP8XLqGAPGYmXhHDSVT+Rs0hvOml+
TLSH
T1DCD4E02079A4C035E5B716F4497A93A8E93E7E735F2490CB22DE26EA26347E4DC30753
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-30_8398230158f116c7d759c4c97c37eca9_amadey_elex_rhadamanthys_smoke-loader_stop

File Explorer

2026-09-30_8398230158f116c7d759c4c97c37eca9_amadey_elex_rhadamanthys_smoke-loader_stop

.exe 592KB

2026-09-30_8398230158f116c7d759c4c97c37eca9_amadey_elex_rhadamanthys_smoke-loader_stop

IMPHASH 6abb333342201a93de1795b4b0940b40
SHA256 c957bb25fb195d8f0f01fb882b2b3aa8814ae70ce6e4df36925bf8cd3dec6381
MD5 8398230158f116c7d759c4c97c37eca9
SHA1 96295f55552ae8df7bc236ecaba0ed2937844cd4
SHA512 c5b9306d461f79cfa2243e26a4eecdaee3e3a5f016cf45f30f5c37c8c71ebfca63d85d43e97c58a1cb633044de6e3bb4435fec0bf1143da340bcfbea7cc130f5
SSDEEP 12288:q8ns86B8LEvFTGTEPGtMvECqLDhhxcSHSVT9cRs0AuvOmaU+:qP8XLqGAPGYmXhHDSVT+Rs0hvOml+
TLSH
T1DCD4E02079A4C035E5B716F4497A93A8E93E7E735F2490CB22DE26EA26347E4DC30753
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

6800

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\henabivocupob jugo\yasidawi.pdb

kernel32

CopyFileExW GetConsoleAliasExesLengthA CallNamedPipeA GetQueuedCompletionStatus GetCommState InterlockedDecrement CancelWaitableTimer UnlockFile SetEvent FreeEnvironmentStringsA CreateNamedPipeW GetNumberFormatA ReadConsoleOutputA GetCommandLineA GetPrivateProfileIntA GetSystemDirectoryW HeapCreate TerminateProcess FileTimeToSystemTime GetModuleFileNameW lstrlenW WritePrivateProfileStringW GetPrivateProfileIntW InterlockedExchange GetStartupInfoA GetCPInfoExW FreeLibraryAndExitThread SetThreadContext GetThreadLocale GetProcAddress SetStdHandle EnterCriticalSection LoadLibraryA OpenMutexA CreateSemaphoreW LocalAlloc GetProfileStringA SetThreadIdealProcessor HeapWalk GlobalWire GetModuleHandleA FindFirstChangeNotificationA FreeEnvironmentStringsW FindNextFileW WriteProfileStringW GetCurrentDirectoryA SetFileShortNameA TlsAlloc FindAtomW EnumResourceLanguagesW DeleteFileW GetSystemTime LCMapStringW CopyFileExA GetVolumeInformationW GetLastError GetFileSize MoveFileA GetStartupInfoW HeapValidate IsBadReadPtr RaiseException GetModuleHandleW Sleep InterlockedIncrement ExitProcess TlsGetValue TlsSetValue GetCurrentThreadId TlsFree SetLastError DeleteCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter SetHandleCount GetStdHandle GetFileType GetCurrentProcess IsDebuggerPresent QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW GetCommandLineW HeapDestroy HeapFree VirtualFree GetModuleFileNameA WriteFile HeapAlloc HeapSize HeapReAlloc VirtualAlloc GetACP GetOEMCP GetCPInfo IsValidCodePage InitializeCriticalSectionAndSpinCount RtlUnwind DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW LoadLibraryW SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers WriteConsoleA GetConsoleOutputCP CloseHandle CreateFileA

advapi32

InitiateSystemShutdownA

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-30_8398230158f116c7d759c4c97c37eca9_amadey_elex_rhadamanthys_smoke-loader_stop

kernel32

advapi32

generic