2026-09-30_545606aa4b69fa95f9f3c17e67f8322d_amadey_elex_karagany_rhadamanthys_smoke-loader

General

Target
2026-09-30_545606aa4b69fa95f9f3c17e67f8322d_amadey_elex_karagany_rhadamanthys_smoke-loader
Size 285KB
Sample260930-ngxk2stala
SHA256 e1da7937d31bcc5f6420727ffe7769aa6b66c9c832fca2d6ad7d31d245433a28
MD5 545606aa4b69fa95f9f3c17e67f8322d
SHA1 5307ff133d9aba6e5cfa39c7b05656109eb8e53e
SHA512 8a4463864cd16e0a21d302c57bcc6d73222a811a0e3efd7c3a5883187373efbe6a2cecf372fdc2aaa27553b52d7edd267517c4fe1e6405c23f3fa4eb146c9336
SSDEEP 3072:bbBpiuVHtypfQDdR1/F3RQAkaB2p9S20keg+SeWlTD8SHLhGI8tt6hokius:/BEOmfQ31/FBQ+4aWVhA+ikiu
TLSH
T153549E10B6E0C034F2B712F959BA93B8A92C7DB16B34D4CB67D51AEA52746E0DC30397
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-30_545606aa4b69fa95f9f3c17e67f8322d_amadey_elex_karagany_rhadamanthys_smoke-loader

File Explorer

2026-09-30_545606aa4b69fa95f9f3c17e67f8322d_amadey_elex_karagany_rhadamanthys_smoke-loader

.exe 285KB

2026-09-30_545606aa4b69fa95f9f3c17e67f8322d_amadey_elex_karagany_rhadamanthys_smoke-loader

IMPHASH efb815d76c298dec768e3e4b14d60fd3
SHA256 e1da7937d31bcc5f6420727ffe7769aa6b66c9c832fca2d6ad7d31d245433a28
MD5 545606aa4b69fa95f9f3c17e67f8322d
SHA1 5307ff133d9aba6e5cfa39c7b05656109eb8e53e
SHA512 8a4463864cd16e0a21d302c57bcc6d73222a811a0e3efd7c3a5883187373efbe6a2cecf372fdc2aaa27553b52d7edd267517c4fe1e6405c23f3fa4eb146c9336
SSDEEP 3072:bbBpiuVHtypfQDdR1/F3RQAkaB2p9S20keg+SeWlTD8SHLhGI8tt6hokius:/BEOmfQ31/FBQ+4aWVhA+ikiu
TLSH
T153549E10B6E0C034F2B712F959BA93B8A92C7DB16B34D4CB67D51AEA52746E0DC30397
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

7104

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\wexezematuhe9_napi\did3\zegukoleduxos\fe.pdb

kernel32

GetThreadContext SetLocalTime FindResourceExW InterlockedIncrement GetCommState InterlockedDecrement UnlockFile SetEvent FreeEnvironmentStringsA CreateNamedPipeW GetConsoleAliasesLengthA GetCommandLineA GetPrivateProfileIntA LoadLibraryW GetConsoleAliasExesLengthW HeapDestroy CreateSemaphoreA GetBinaryTypeA TerminateProcess GetSystemDirectoryA lstrlenW LCMapStringA GetPrivateProfileIntW InterlockedExchange GetStartupInfoA GetStdHandle GetCPInfoExW FreeLibraryAndExitThread OpenMutexW GetLastError GetCurrentDirectoryW GetThreadLocale GetProcAddress EnterCriticalSection LoadLibraryA LocalAlloc WritePrivateProfileStringA GetNumberFormatW GetProfileStringA SetThreadIdealProcessor HeapWalk FindAtomA SetSystemTime GlobalWire GetModuleFileNameA CreateIoCompletionPort GetModuleHandleA FindFirstChangeNotificationA FindNextFileW WriteProfileStringW SetFileShortNameA TlsAlloc EnumResourceLanguagesW UnregisterWaitEx CopyFileExA DeleteFileA GetVolumeInformationW LocalFileTimeToFileTime EncodePointer DecodePointer HeapSetInformation GetStartupInfoW LeaveCriticalSection SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW GetModuleHandleW ExitProcess HeapValidate IsBadReadPtr QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW TlsGetValue TlsSetValue TlsFree SetLastError HeapCreate WriteFile SetFilePointer GetConsoleCP GetConsoleMode OutputDebugStringA WriteConsoleW OutputDebugStringW RtlUnwind GetACP GetOEMCP GetCPInfo IsValidCodePage HeapAlloc HeapReAlloc HeapSize HeapQueryInformation HeapFree MultiByteToWideChar IsProcessorFeaturePresent FlushFileBuffers SetStdHandle LCMapStringW GetStringTypeW CloseHandle CreateFileW RaiseException

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-30_545606aa4b69fa95f9f3c17e67f8322d_amadey_elex_karagany_rhadamanthys_smoke-loader

kernel32

generic