General
- Target 2026-09-30_545606aa4b69fa95f9f3c17e67f8322d_amadey_elex_karagany_rhadamanthys_smoke-loader
- Size 285KB
- Sample260930-ngxk2stala
- SHA256 e1da7937d31bcc5f6420727ffe7769aa6b66c9c832fca2d6ad7d31d245433a28
- MD5 545606aa4b69fa95f9f3c17e67f8322d
- SHA1 5307ff133d9aba6e5cfa39c7b05656109eb8e53e
- SHA512 8a4463864cd16e0a21d302c57bcc6d73222a811a0e3efd7c3a5883187373efbe6a2cecf372fdc2aaa27553b52d7edd267517c4fe1e6405c23f3fa4eb146c9336
- SSDEEP 3072:bbBpiuVHtypfQDdR1/F3RQAkaB2p9S20keg+SeWlTD8SHLhGI8tt6hokius:/BEOmfQ31/FBQ+4aWVhA+ikiu
- TLSH T153549E10B6E0C034F2B712F959BA93B8A92C7DB16B34D4CB67D51AEA52746E0DC30397
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-30_545606aa4b69fa95f9f3c17e67f8322d_amadey_elex_karagany_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-30_545606aa4b69fa95f9f3c17e67f8322d_amadey_elex_karagany_rhadamanthys_smoke-loader.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-30_545606aa4b69fa95f9f3c17e67f8322d_amadey_elex_karagany_rhadamanthys_smoke-loader
- Size 285KB
- SHA256 e1da7937d31bcc5f6420727ffe7769aa6b66c9c832fca2d6ad7d31d245433a28
- MD5 545606aa4b69fa95f9f3c17e67f8322d
- SHA1 5307ff133d9aba6e5cfa39c7b05656109eb8e53e
- SHA512 8a4463864cd16e0a21d302c57bcc6d73222a811a0e3efd7c3a5883187373efbe6a2cecf372fdc2aaa27553b52d7edd267517c4fe1e6405c23f3fa4eb146c9336
- SSDEEP 3072:bbBpiuVHtypfQDdR1/F3RQAkaB2p9S20keg+SeWlTD8SHLhGI8tt6hokius:/BEOmfQ31/FBQ+4aWVhA+ikiu
- TLSH T153549E10B6E0C034F2B712F959BA93B8A92C7DB16B34D4CB67D51AEA52746E0DC30397
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes a file named after a Windows system binary
The file runs from a user directory while carrying the name of an executable that normally only exists in System32.
-
Executes dropped EXE