2026-09-30_5756513d60237832da1b29b2f4b92548_amadey_elex_karagany_rhadamanthys_smoke-loader

General

Target
2026-09-30_5756513d60237832da1b29b2f4b92548_amadey_elex_karagany_rhadamanthys_smoke-loader
Size 604KB
Sample260930-nehdcashkh
SHA256 7e85c05fde969452b6b2834407f7fd24def10e61fb7bc6c270ffb1c7e86221e3
MD5 5756513d60237832da1b29b2f4b92548
SHA1 497be91ef437ae6bf98b302f16ac44c7054861ce
SHA512 ffdfd9b5ef840fdf81a11db6920e93327114c111e258b31a4d3211523a9f787868b1d65b566b2a6c6e2d4dcaf1547a98ea9a004441f50f26521344fc0e155fb8
SSDEEP 12288:2GLMAXQWbzHL197WjEj7c+cCjzYOehMbr6CA1viUjO0fYl4yhYKTog27:2cQWb37UEj41CjzYorWvOtXhXY
TLSH
T1FDD4F110B7E1C035F6F722BA49B593B8A53DBDB16B34D5CB61C41AEA1668AE0DC30347
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-30_5756513d60237832da1b29b2f4b92548_amadey_elex_karagany_rhadamanthys_smoke-loader

File Explorer

2026-09-30_5756513d60237832da1b29b2f4b92548_amadey_elex_karagany_rhadamanthys_smoke-loader

.exe 604KB

2026-09-30_5756513d60237832da1b29b2f4b92548_amadey_elex_karagany_rhadamanthys_smoke-loader

IMPHASH c240386fd77e6beba15b6f939f6cee41
SHA256 7e85c05fde969452b6b2834407f7fd24def10e61fb7bc6c270ffb1c7e86221e3
MD5 5756513d60237832da1b29b2f4b92548
SHA1 497be91ef437ae6bf98b302f16ac44c7054861ce
SHA512 ffdfd9b5ef840fdf81a11db6920e93327114c111e258b31a4d3211523a9f787868b1d65b566b2a6c6e2d4dcaf1547a98ea9a004441f50f26521344fc0e155fb8
SSDEEP 12288:2GLMAXQWbzHL197WjEj7c+cCjzYOehMbr6CA1viUjO0fYl4yhYKTog27:2cQWb37UEj41CjzYorWvOtXhXY
TLSH
T1FDD4F110B7E1C035F6F722BA49B593B8A53DBDB16B34D5CB61C41AEA1668AE0DC30347
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

6544

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\dehevonoxesat yupef62 duculupovovo58.pdb

kernel32

SetThreadContext FindFirstChangeNotificationW GetConsoleAliasExesLengthA CallNamedPipeA InterlockedIncrement GetQueuedCompletionStatus CancelWaitableTimer UnlockFile SetEvent FreeEnvironmentStringsA GetModuleHandleW CreateNamedPipeW SetCommState GetPrivateProfileIntA GetSystemDirectoryW HeapCreate TerminateProcess FileTimeToSystemTime GetModuleFileNameW lstrlenW GetPrivateProfileIntW InterlockedExchange GetStartupInfoA FreeLibraryAndExitThread OpenMutexW GetLastError GetFileSize GetThreadLocale GetProcAddress SetStdHandle EnterCriticalSection LoadLibraryA CreateSemaphoreW LocalAlloc WritePrivateProfileStringA GetNumberFormatW GetProfileStringA SetThreadIdealProcessor HeapWalk FindAtomA GlobalWire FreeEnvironmentStringsW FindNextFileW WriteProfileStringW GetCPInfoExA SetFileShortNameA TlsAlloc EnumResourceLanguagesW GetSystemTime LCMapStringW CopyFileExA DeleteFileA GetVolumeInformationW GetCurrentDirectoryW GetCommandLineW MoveFileA EncodePointer DecodePointer GetCommandLineA HeapSetInformation GetStartupInfoW HeapValidate IsBadReadPtr InterlockedDecrement ExitProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime GetModuleFileNameA WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsGetValue TlsSetValue TlsFree SetLastError WriteFile LeaveCriticalSection HeapAlloc HeapReAlloc HeapSize HeapQueryInformation HeapFree GetACP GetOEMCP GetCPInfo IsValidCodePage LoadLibraryW RtlUnwind SetFilePointer GetConsoleCP GetConsoleMode OutputDebugStringA WriteConsoleW OutputDebugStringW MultiByteToWideChar IsProcessorFeaturePresent GetStringTypeW CreateFileW CloseHandle FlushFileBuffers RaiseException

advapi32

InitiateSystemShutdownA

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-30_5756513d60237832da1b29b2f4b92548_amadey_elex_karagany_rhadamanthys_smoke-loader

kernel32

advapi32

generic