2026-09-30_5d60ad1bc5a0bc616f3bdcec2a0f2e2c_amadey_elex_rhadamanthys_smoke-loader_stop

General

Target
2026-09-30_5d60ad1bc5a0bc616f3bdcec2a0f2e2c_amadey_elex_rhadamanthys_smoke-loader_stop
Size 512KB
Sample260930-m8x58asdja
SHA256 5ba696b17b53216fcc5281cc2094a66874fc4f8c533dc91c31a0469892ce6f8d
MD5 5d60ad1bc5a0bc616f3bdcec2a0f2e2c
SHA1 69a985f83fc49efac8723638cd5d2986b1a72895
SHA512 2aee2ee188b0c6fc5f160465bb785d436a5f5179a06ddaf5c0671b9adea537af3726cd3dbeaf1343c234633b64d91893934418e0eb748d3577b853934d159ec7
SSDEEP 12288:EPrPVKGdf5QYsSlv5rnOozXq2yGYanZK5BfQ43E:erVK+k2rnObmne2
TLSH
T138B4E130BAA0C035F4BB12F459BAD7B86929BE705B3054CB62D556EE0734AE49C313B7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-30_5d60ad1bc5a0bc616f3bdcec2a0f2e2c_amadey_elex_rhadamanthys_smoke-loader_stop

File Explorer

2026-09-30_5d60ad1bc5a0bc616f3bdcec2a0f2e2c_amadey_elex_rhadamanthys_smoke-loader_stop

.exe 512KB

2026-09-30_5d60ad1bc5a0bc616f3bdcec2a0f2e2c_amadey_elex_rhadamanthys_smoke-loader_stop

IMPHASH 4c39ef110d201a46c44ac5879ab8aca9
SHA256 5ba696b17b53216fcc5281cc2094a66874fc4f8c533dc91c31a0469892ce6f8d
MD5 5d60ad1bc5a0bc616f3bdcec2a0f2e2c
SHA1 69a985f83fc49efac8723638cd5d2986b1a72895
SHA512 2aee2ee188b0c6fc5f160465bb785d436a5f5179a06ddaf5c0671b9adea537af3726cd3dbeaf1343c234633b64d91893934418e0eb748d3577b853934d159ec7
SSDEEP 12288:EPrPVKGdf5QYsSlv5rnOozXq2yGYanZK5BfQ43E:erVK+k2rnObmne2
TLSH
T138B4E130BAA0C035F4BB12F459BAD7B86929BE705B3054CB62D556EE0734AE49C313B7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

7104

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\bujopukehohar14_gunareyipago new\pefiherah\nanabid.pdb

kernel32

FileTimeToDosDateTime HeapReAlloc GetNativeSystemInfo CopyFileExW TlsGetValue GetStringTypeA SetLocalTime CallNamedPipeA SetWaitableTimer InterlockedIncrement GetCommState GetNamedPipeHandleStateA CreateDirectoryW GlobalLock SetHandleInformation GetProfileStringW GetProfileSectionA FreeEnvironmentStringsA GetPrivateProfileStringW ReadConsoleW GetCommandLineA SetProcessPriorityBoost GlobalAlloc LoadLibraryW TerminateThread GetSystemWindowsDirectoryA VerifyVersionInfoA EnumResourceLanguagesA IsDBCSLeadByte GetCompressedFileSizeA GetSystemDirectoryA lstrlenW WritePrivateProfileStringW LCMapStringA GetPrivateProfileIntW InterlockedExchange GetStartupInfoA GetCPInfoExW GetLastError GetThreadLocale GetProcAddress SetStdHandle EnterCriticalSection DisableThreadLibraryCalls LoadLibraryA HeapWalk FindAtomA SetSystemTime GetOEMCP Process32NextW WriteProfileStringA GetThreadPriority GetModuleHandleA QueryMemoryResourceNotification FreeEnvironmentStringsW FindNextFileW GetCurrentDirectoryA GetCurrentThreadId LocalSize UnregisterWaitEx GetVolumeInformationW HeapValidate IsBadReadPtr RaiseException LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW InterlockedDecrement RtlUnwind GetACP GetCPInfo IsValidCodePage GetModuleHandleW TlsAlloc TlsSetValue TlsFree SetLastError DeleteCriticalSection QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep ExitProcess GetModuleFileNameA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType HeapDestroy HeapCreate HeapFree VirtualFree WriteFile HeapAlloc HeapSize VirtualAlloc DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW MultiByteToWideChar GetStringTypeW GetLocaleInfoA LCMapStringW InitializeCriticalSectionAndSpinCount FlushFileBuffers GetConsoleCP GetConsoleMode SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP CreateFileA

winhttp

WinHttpWriteData

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-30_5d60ad1bc5a0bc616f3bdcec2a0f2e2c_amadey_elex_rhadamanthys_smoke-loader_stop

kernel32

winhttp

generic