2026-10-16_d73765c9112681521068b6ff037f53b2_elex_rhadamanthys_smoke-loader_wapomi

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-16_d73765c9112681521068b6ff037f53b2_elex_rhadamanthys_smoke-loader_wapomi
Size 61KB
Sample261017-gd99eaas3j
SHA256 1dabb7b999e370d8afa543b2825f9cd66453823132af7a40d928bdce6772cbff
MD5 d73765c9112681521068b6ff037f53b2
SHA1 9e2ca12aa4439b6782239837ae4ede0e0595a574
SHA512 de3550b02730d01073fe819f8de970151c634786091ec557f4d5ecd97a8e461b68a04fca04fdeed0c3dbbcf5d778a6d506b156eb4f8493a3fdf5534fcc706e55
SSDEEP 1536:4iNelFKptsFYoqPevbvsppG9GCq2iW7z:RNCWi6oqmTvsppyGCH
TLSH
T12C5339132FE08495F1B34F30687A66A98A25FD231A38914F6BC02D5F6C76E40DD71B67
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-16_d73765c9112681521068b6ff037f53b2_elex_rhadamanthys_smoke-loader_wapomi

File Explorer

2026-10-16_d73765c9112681521068b6ff037f53b2_elex_rhadamanthys_smoke-loader_wapomi

.exe 61KB

2026-10-16_d73765c9112681521068b6ff037f53b2_elex_rhadamanthys_smoke-loader_wapomi

IMPHASH e58263e3d76981c7bc11645789a2638f
SHA256 1dabb7b999e370d8afa543b2825f9cd66453823132af7a40d928bdce6772cbff
MD5 d73765c9112681521068b6ff037f53b2
SHA1 9e2ca12aa4439b6782239837ae4ede0e0595a574
SHA512 de3550b02730d01073fe819f8de970151c634786091ec557f4d5ecd97a8e461b68a04fca04fdeed0c3dbbcf5d778a6d506b156eb4f8493a3fdf5534fcc706e55
SSDEEP 1536:4iNelFKptsFYoqPevbvsppG9GCq2iW7z:RNCWi6oqmTvsppyGCH
TLSH
T12C5339132FE08495F1B34F30687A66A98A25FD231A38914F6BC02D5F6C76E40DD71B67
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

57344

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

comctl32

ord17

version

VerInstallFileA

kernel32

GetStartupInfoA ExitProcess GetCommandLineA GetModuleHandleA AddAtomA LockResource lstrcpyA FindResourceExA SetErrorMode LocalFree FormatMessageA OpenEventA FindResourceA SetEvent LoadResource RemoveDirectoryA GetAtomNameA GetShortPathNameA CreateDirectoryA lstrcpynA lstrlenA lstrcatA GetLastError GetFileAttributesA SetFileAttributesA GlobalLock GlobalAlloc GetPrivateProfileIntA GetPrivateProfileStringA CopyFileA DeleteFileA GetUserDefaultLangID GlobalUnlock GlobalFree GetModuleFileNameA RtlUnwind Sleep CloseHandle lstrlenW WideCharToMultiByte MultiByteToWideChar GetTempPathA WaitForSingleObject CreateProcessA CreateFileA GetTempFileNameA

user32

GetDC ReleaseDC PeekMessageA CreateDialogParamA EndPaint MessageBoxA GetWindowLongA EndDialog BeginPaint DispatchMessageA SetWindowLongA DialogBoxIndirectParamA DestroyWindow CreateDialogIndirectParamA SetDlgItemTextA GetClientRect GetWindowRect MoveWindow CharLowerA wsprintfA IsDialogMessageA TranslateMessage GetDlgItem LoadImageA SendMessageA CharUpperA CharNextA GetDesktopWindow

gdi32

BitBlt UnrealizeObject GetObjectA GetDeviceCaps CreateHalftonePalette CreatePalette GetSystemPaletteEntries GetDIBColorTable SelectPalette RealizePalette DeleteDC CreateCompatibleDC SelectObject

advapi32

RegOpenKeyA RegCloseKey RegOpenKeyExA RegQueryValueExA RegSetValueExA

ole32

CoInitialize CoFreeAllLibraries CoUninitialize CoCreateInstance

oleaut32

SysAllocString SysAllocStringLen SysFreeString VariantClear SafeArrayGetElement SysStringLen SafeArrayGetLBound SafeArrayGetUBound

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-16_d73765c9112681521068b6ff037f53b2_elex_rhadamanthys_smoke-loader_wapomi

comctl32

version

kernel32

user32

gdi32

advapi32

ole32

oleaut32

generic