2026-09-30_73924e095cac183d3b49af705a75d17e_amadey_elex_karagany_rhadamanthys_smoke-loader

General

Target
2026-09-30_73924e095cac183d3b49af705a75d17e_amadey_elex_karagany_rhadamanthys_smoke-loader
Size 241KB
Sample260930-mg2pbsce79
SHA256 51ee40a24d5a051557faafa1b2dd8f1fd6ee28f38d4a502193e900bd8aa7668c
MD5 73924e095cac183d3b49af705a75d17e
SHA1 4152daa991d4e44da4fde8df5aa0e5b713585c3a
SHA512 bccf969741127f5174ab9e1813f7f92446851be8907e5eeaaf2eaa3e88af6c43426d962482aec3d0e73a84661ffaf59b7a9c68ca2d35959b7a72ab3175e412b3
SSDEEP 6144:Qe7EQenCWHHnuuUNlRltZBCzJEp7XHyrmt:Qe7EQedHnuuI5Tb
TLSH
T192349E107BE0C035F4B712BB5975D3B5A52DBDB1AB25C1CB62C52AEA9A346E0EC30743
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-30_73924e095cac183d3b49af705a75d17e_amadey_elex_karagany_rhadamanthys_smoke-loader

File Explorer

2026-09-30_73924e095cac183d3b49af705a75d17e_amadey_elex_karagany_rhadamanthys_smoke-loader

.exe 241KB

2026-09-30_73924e095cac183d3b49af705a75d17e_amadey_elex_karagany_rhadamanthys_smoke-loader

IMPHASH a9e1103bbc08b87eea5d7311fb0b7c3e
SHA256 51ee40a24d5a051557faafa1b2dd8f1fd6ee28f38d4a502193e900bd8aa7668c
MD5 73924e095cac183d3b49af705a75d17e
SHA1 4152daa991d4e44da4fde8df5aa0e5b713585c3a
SHA512 bccf969741127f5174ab9e1813f7f92446851be8907e5eeaaf2eaa3e88af6c43426d962482aec3d0e73a84661ffaf59b7a9c68ca2d35959b7a72ab3175e412b3
SSDEEP 6144:Qe7EQenCWHHnuuUNlRltZBCzJEp7XHyrmt:Qe7EQedHnuuI5Tb
TLSH
T192349E107BE0C035F4B712BB5975D3B5A52DBDB1AB25C1CB62C52AEA9A346E0EC30743
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

6064

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\vaj_budaduzacinuc-76\juzad.pdb

kernel32

FreeLibrary InterlockedIncrement GetCommState GetProfileStringW CallNamedPipeW GetNumberFormatA GetCommandLineA FindResourceExA GlobalAlloc GetPrivateProfileIntA GetVolumeInformationA GetSystemWow64DirectoryW GetSystemWindowsDirectoryA HeapDestroy GetCompressedFileSizeA GetSystemDirectoryA CreateActCtxA GetBinaryTypeW WritePrivateProfileStringW LCMapStringA GetStartupInfoA SetThreadLocale GetStdHandle CopyFileExW GetLastError SetLastError GetProcAddress CreateNamedPipeA SearchPathA LoadLibraryA OpenMutexA CreateSemaphoreW FindAtomA SetSystemTime GetModuleFileNameA CreateIoCompletionPort FindFirstChangeNotificationA HeapSetInformation FreeEnvironmentStringsW FindNextFileW GetCurrentDirectoryA SetFileShortNameA TerminateJobObject FindAtomW UnregisterWaitEx DeleteFileA lstrlenA GetCPInfoExW GetThreadContext CloseHandle CreateFileW WideCharToMultiByte EncodePointer DecodePointer GetCommandLineW GetStartupInfoW InterlockedDecrement GetModuleHandleW ExitProcess TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW WriteFile GetACP GetOEMCP GetCPInfo IsValidCodePage TlsAlloc TlsGetValue TlsSetValue GetCurrentThreadId TlsFree HeapValidate IsBadReadPtr QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection HeapCreate EnterCriticalSection LeaveCriticalSection LoadLibraryW IsProcessorFeaturePresent OutputDebugStringA WriteConsoleW OutputDebugStringW RtlUnwind LCMapStringW MultiByteToWideChar GetStringTypeW HeapAlloc HeapReAlloc HeapSize HeapQueryInformation HeapFree SetFilePointer GetConsoleCP GetConsoleMode RaiseException SetStdHandle FlushFileBuffers

advapi32

InitiateSystemShutdownA AbortSystemShutdownA

winhttp

WinHttpOpen

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-30_73924e095cac183d3b49af705a75d17e_amadey_elex_karagany_rhadamanthys_smoke-loader

kernel32

advapi32

winhttp

generic