2026-09-30_a4e35ee3257bb4b6586aa493d17210bd_amadey_elex_rhadamanthys_smoke-loader_stop

General

Target
2026-09-30_a4e35ee3257bb4b6586aa493d17210bd_amadey_elex_rhadamanthys_smoke-loader_stop
Size 494KB
Sample261001-km4prsstez
SHA256 af0af4f44007acc7f097a7e9902f180cec8067ab3b992bca27716c316d8b52f5
MD5 a4e35ee3257bb4b6586aa493d17210bd
SHA1 304bd73e23778172af271704890ff14740866dd6
SHA512 4807dc1efbc6784558f6b62a40b0a6c9f1fc8fc0074b6c4adea958849247b5792b6ea3c0c155228966f6114e9a8267715cc237caa7c9108493291fe69e714dc0
SSDEEP 12288:uZvoyiH/CGcCGj31ac7AmMkkXJBZ4/6y5KpddKvdhM:utoyrxjymfinZ4/pKpdQvP
TLSH
T1CCB4E120A6A1C035F5F712F8497A5378A83D7AB26B7440CB62C61BFE52386F89D30757
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-30_a4e35ee3257bb4b6586aa493d17210bd_amadey_elex_rhadamanthys_smoke-loader_stop

File Explorer

2026-09-30_a4e35ee3257bb4b6586aa493d17210bd_amadey_elex_rhadamanthys_smoke-loader_stop

.exe 494KB

2026-09-30_a4e35ee3257bb4b6586aa493d17210bd_amadey_elex_rhadamanthys_smoke-loader_stop

IMPHASH 1bd6d269463cc591268b8d14694f5ae5
SHA256 af0af4f44007acc7f097a7e9902f180cec8067ab3b992bca27716c316d8b52f5
MD5 a4e35ee3257bb4b6586aa493d17210bd
SHA1 304bd73e23778172af271704890ff14740866dd6
SHA512 4807dc1efbc6784558f6b62a40b0a6c9f1fc8fc0074b6c4adea958849247b5792b6ea3c0c155228966f6114e9a8267715cc237caa7c9108493291fe69e714dc0
SSDEEP 12288:uZvoyiH/CGcCGj31ac7AmMkkXJBZ4/6y5KpddKvdhM:utoyrxjymfinZ4/pKpdQvP
TLSH
T1CCB4E120A6A1C035F5F712F8497A5378A83D7AB26B7440CB62C61BFE52386F89D30757
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8064

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\dev.pdb

kernel32

GetCommandLineW GetThreadContext UnregisterWait DosDateTimeToFileTime FindFirstChangeNotificationW CopyFileExW CallNamedPipeA HeapAlloc SetWaitableTimer InterlockedIncrement InterlockedDecrement GlobalLock GetProfileStringW FreeEnvironmentStringsA CreateNamedPipeW LocalFlags SetCommState SetProcessPriorityBoost GetSystemTimes ActivateActCtx GlobalAlloc GetPrivateProfileIntA GetSystemDirectoryW GetVolumeInformationA LoadLibraryW TerminateThread LeaveCriticalSection VerifyVersionInfoA IsDBCSLeadByte GetCompressedFileSizeA lstrlenW LCMapStringA InterlockedExchange GetStartupInfoA SetThreadLocale GetCPInfoExW GetLastError SetLastError GetProcAddress SetStdHandle DisableThreadLibraryCalls LoadLibraryA WritePrivateProfileStringA FindAtomA GetModuleFileNameA GetThreadPriority CreateIoCompletionPort GetModuleHandleA QueryMemoryResourceNotification HeapSetInformation FreeEnvironmentStringsW FindNextFileW WriteProfileStringW GetCurrentDirectoryA GetCurrentThreadId TlsAlloc LocalSize EnumResourceLanguagesW GetSystemTime GetProfileSectionW GetStartupInfoW HeapValidate IsBadReadPtr RaiseException EnterCriticalSection GetFileType WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode GetModuleHandleW Sleep ExitProcess TlsGetValue TlsSetValue TlsFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW RtlUnwind GetACP GetOEMCP GetCPInfo IsValidCodePage DeleteCriticalSection QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW SetHandleCount GetStdHandle HeapDestroy HeapCreate HeapFree VirtualFree HeapSize HeapReAlloc VirtualAlloc InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar SetFilePointer GetStringTypeA GetStringTypeW GetLocaleInfoA DebugBreak OutputDebugStringA OutputDebugStringW LCMapStringW CreateFileA CloseHandle FlushFileBuffers

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-30_a4e35ee3257bb4b6586aa493d17210bd_amadey_elex_rhadamanthys_smoke-loader_stop

kernel32

generic