2026-10-19_b5d1ab41c0f36b6322f45bdc65b2cf2d_amadey_elex_rhadamanthys_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-19_b5d1ab41c0f36b6322f45bdc65b2cf2d_amadey_elex_rhadamanthys_smoke-loader
Size 2.3MB
Sample261020-mk8xtagv5v
SHA256 1d00a954aeb6ffeca55bad9eb1922a3829b78c65a9eba81ca9658f49225ad769
MD5 b5d1ab41c0f36b6322f45bdc65b2cf2d
SHA1 842b4ecfe55cd88f42c3030220bd2bb5bd6d9fc0
SHA512 ad420951baf8379b56d426740a9182ae3c5ee95f251a8198e93ea3b8ad959926b4f264d54a777598ecaeedccac1cded98e66da5d91837d83baf64b12746adccf
SSDEEP 49152:Dw5svc/SPFN729H4hQmEJff8cpA4YvMHvYsJHbLoscZK:3U/yFNay+m00+PMEvY+bhcA
TLSH
T1CFB52352E7C2D4B0C81534B4201E23FB0A38B5186375F2E79797FE9889762C26B7A357
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-19_b5d1ab41c0f36b6322f45bdc65b2cf2d_amadey_elex_rhadamanthys_smoke-loader

File Explorer

2026-10-19_b5d1ab41c0f36b6322f45bdc65b2cf2d_amadey_elex_rhadamanthys_smoke-loader

.exe 2.3MB

2026-10-19_b5d1ab41c0f36b6322f45bdc65b2cf2d_amadey_elex_rhadamanthys_smoke-loader

IMPHASH ca3b55b8afa5fa8558364aa0b5fc8540
SHA256 1d00a954aeb6ffeca55bad9eb1922a3829b78c65a9eba81ca9658f49225ad769
MD5 b5d1ab41c0f36b6322f45bdc65b2cf2d
SHA1 842b4ecfe55cd88f42c3030220bd2bb5bd6d9fc0
SHA512 ad420951baf8379b56d426740a9182ae3c5ee95f251a8198e93ea3b8ad959926b4f264d54a777598ecaeedccac1cded98e66da5d91837d83baf64b12746adccf
SSDEEP 49152:Dw5svc/SPFN729H4hQmEJff8cpA4YvMHvYsJHbLoscZK:3U/yFNay+m00+PMEvY+bhcA
TLSH
T1CFB52352E7C2D4B0C81534B4201E23FB0A38B5186375F2E79797FE9889762C26B7A357
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

30675

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

user32

GetMessageA TranslateMessage DispatchMessageA GetDesktopWindow CopyRect OffsetRect SetWindowPos LoadIconA LoadCursorA DialogBoxParamA CreateWindowExW CreateWindowExA RegisterClassA ExitWindowsEx SetWindowTextW ScreenToClient EndDialog ShowWindow GetDlgItem GetSystemMetrics EnableWindow GetTabbedTextExtentA SetWindowTextA GetWindowRect MoveWindow SendMessageA GetClientRect GetDC SystemParametersInfoA ReleaseDC PostQuitMessage DefWindowProcA BeginPaint EndPaint UpdateWindow InvalidateRect

advapi32

AdjustTokenPrivileges LookupPrivilegeValueA OpenProcessToken

gdi32

TextOutA SetBkMode SetBkColor DeleteObject GetTextExtentPoint32A SelectObject CreateFontIndirectA LPtoDP GetTextExtentPointW CreateFontW GetDeviceCaps

shell32

ShellExecuteW SHGetFolderPathA

kernel32

GetOEMCP GetACP InitializeCriticalSection SetFilePointer ReadFile GetCPInfo SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA UnhandledExceptionFilter QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetLocaleInfoA GetStringTypeA GetStringTypeW HeapSize SetStdHandle FlushFileBuffers CreateFileW SetEndOfFile GetFileType WaitForSingleObject GetStdHandle WriteFile CloseHandle GetModuleFileNameA WideCharToMultiByte GetModuleFileNameW Sleep GetLastError GetVersionExA MultiByteToWideChar CreateFileA GetWindowsDirectoryA GetTempPathA LocalFree GetLocalTime LocalAlloc GetModuleHandleA GetProcAddress GetModuleHandleW ExitThread ExitProcess GetCurrentProcess LoadLibraryW SetLastError OutputDebugStringA LoadLibraryA MulDiv MoveFileExA DeleteFileW FreeLibrary TerminateThread CreateThread CreateMutexA GetSystemInfo RtlUnwind HeapAlloc HeapReAlloc TerminateProcess GetStartupInfoA GetCommandLineA HeapFree EnterCriticalSection LeaveCriticalSection InterlockedExchange VirtualQuery VirtualProtect VirtualAlloc LCMapStringA LCMapStringW TlsAlloc GetCurrentThreadId TlsFree TlsSetValue TlsGetValue DeleteCriticalSection HeapDestroy HeapCreate VirtualFree

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-19_b5d1ab41c0f36b6322f45bdc65b2cf2d_amadey_elex_rhadamanthys_smoke-loader

user32

advapi32

gdi32

shell32

kernel32

generic