2026-09-30_724ec54c1ada40bbbec5a3ae7a7fd93f_amadey_elex_karagany_rhadamanthys_smoke-loader

General

Target
2026-09-30_724ec54c1ada40bbbec5a3ae7a7fd93f_amadey_elex_karagany_rhadamanthys_smoke-loader
Size 801KB
Sample260930-mja96axtbx
SHA256 a2f0ca7c8d72a68de4675745e1392786bc053dc56ee824ef3ac43ddf89545961
MD5 724ec54c1ada40bbbec5a3ae7a7fd93f
SHA1 7496cb2cdd467a17b6f1a330b3dabfbe4300cf87
SHA512 ddfcf5b2765f4cf41098986ecedf9ae44695b4825a26d405e51b4ea1602fe0cd62641b45720fa55085fc7e3fe6a98d39ab2b0e96ed4eff81e6e7f8a6f786c1ba
SSDEEP 12288:D0D0AGQmbExbbHjOm3RljLJljDgYGmo03nhywnvenKSHsh40LoOXlFb88D:hNQmbtc3JqYGKXvQK6sesb
TLSH
T1560501107AE0C034F6F716B548F992B9A13F7EB16B3881CB62D626EA46657D0EC30357
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-30_724ec54c1ada40bbbec5a3ae7a7fd93f_amadey_elex_karagany_rhadamanthys_smoke-loader

File Explorer

2026-09-30_724ec54c1ada40bbbec5a3ae7a7fd93f_amadey_elex_karagany_rhadamanthys_smoke-loader

.exe 801KB

2026-09-30_724ec54c1ada40bbbec5a3ae7a7fd93f_amadey_elex_karagany_rhadamanthys_smoke-loader

IMPHASH c240386fd77e6beba15b6f939f6cee41
SHA256 a2f0ca7c8d72a68de4675745e1392786bc053dc56ee824ef3ac43ddf89545961
MD5 724ec54c1ada40bbbec5a3ae7a7fd93f
SHA1 7496cb2cdd467a17b6f1a330b3dabfbe4300cf87
SHA512 ddfcf5b2765f4cf41098986ecedf9ae44695b4825a26d405e51b4ea1602fe0cd62641b45720fa55085fc7e3fe6a98d39ab2b0e96ed4eff81e6e7f8a6f786c1ba
SSDEEP 12288:D0D0AGQmbExbbHjOm3RljLJljDgYGmo03nhywnvenKSHsh40LoOXlFb88D:hNQmbtc3JqYGKXvQK6sesb
TLSH
T1560501107AE0C034F6F716B548F992B9A13F7EB16B3881CB62D626EA46657D0EC30357
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

6544

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\vaw-mebipuwul\boz\resot\ta.pdb

kernel32

SetThreadContext FindFirstChangeNotificationW GetConsoleAliasExesLengthA CallNamedPipeA InterlockedIncrement GetQueuedCompletionStatus CancelWaitableTimer UnlockFile SetEvent FreeEnvironmentStringsA GetModuleHandleW CreateNamedPipeW SetCommState GetPrivateProfileIntA GetSystemDirectoryW HeapCreate TerminateProcess FileTimeToSystemTime GetModuleFileNameW lstrlenW GetPrivateProfileIntW InterlockedExchange GetStartupInfoA FreeLibraryAndExitThread OpenMutexW GetLastError GetFileSize GetThreadLocale GetProcAddress SetStdHandle EnterCriticalSection LoadLibraryA CreateSemaphoreW LocalAlloc WritePrivateProfileStringA GetNumberFormatW GetProfileStringA SetThreadIdealProcessor HeapWalk FindAtomA GlobalWire FreeEnvironmentStringsW FindNextFileW WriteProfileStringW GetCPInfoExA SetFileShortNameA TlsAlloc EnumResourceLanguagesW GetSystemTime LCMapStringW CopyFileExA DeleteFileA GetVolumeInformationW GetCurrentDirectoryW GetCommandLineW MoveFileA EncodePointer DecodePointer GetCommandLineA HeapSetInformation GetStartupInfoW HeapValidate IsBadReadPtr InterlockedDecrement ExitProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime GetModuleFileNameA WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsGetValue TlsSetValue TlsFree SetLastError WriteFile LeaveCriticalSection HeapAlloc HeapReAlloc HeapSize HeapQueryInformation HeapFree GetACP GetOEMCP GetCPInfo IsValidCodePage LoadLibraryW RtlUnwind SetFilePointer GetConsoleCP GetConsoleMode OutputDebugStringA WriteConsoleW OutputDebugStringW MultiByteToWideChar IsProcessorFeaturePresent GetStringTypeW CreateFileW CloseHandle FlushFileBuffers RaiseException

advapi32

InitiateSystemShutdownA

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-30_724ec54c1ada40bbbec5a3ae7a7fd93f_amadey_elex_karagany_rhadamanthys_smoke-loader

kernel32

advapi32

generic