2026-11-01_85586f58c78c4e7d2a07e4b53ec56087_amadey_elex_manuscrypt_rhadamanthys_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-11-01_85586f58c78c4e7d2a07e4b53ec56087_amadey_elex_manuscrypt_rhadamanthys_smoke-loader
Size 94KB
Sample261102-tjfcfafe99
SHA256 45108b0ace36418a5943828f3ed4ff397939025d362e1cff0f28f8fcd9ce19a4
MD5 85586f58c78c4e7d2a07e4b53ec56087
SHA1 f26ea21591d800aaaebef616b2cd986b2439d876
SHA512 549bf6c4fbfec12a15647ef1ba5edaa98ca46af2841d8e78f8e4e200fd9fd277d40fe004d93367a3ec5c1c29b25697ac442b6636285a6cbd2c1fe5bf9dbfe9a2
SSDEEP 1536:Sdyql1M7wIIEuti7rEYivykYkpaWj0OocG7mJAm/lGb3Lls:SdV1Z1i3QKqjGCJr/lf
TLSH
T1B2939E127AE180F2C48541BC1A9C8F54AB7BBC1445B9D903EB544A8BEFF22D2D73E316
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-01_85586f58c78c4e7d2a07e4b53ec56087_amadey_elex_manuscrypt_rhadamanthys_smoke-loader

File Explorer

2026-11-01_85586f58c78c4e7d2a07e4b53ec56087_amadey_elex_manuscrypt_rhadamanthys_smoke-loader

.exe 94KB

2026-11-01_85586f58c78c4e7d2a07e4b53ec56087_amadey_elex_manuscrypt_rhadamanthys_smoke-loader

IMPHASH d2f8b54b620a14509449dc954d3f2b8b
SHA256 45108b0ace36418a5943828f3ed4ff397939025d362e1cff0f28f8fcd9ce19a4
MD5 85586f58c78c4e7d2a07e4b53ec56087
SHA1 f26ea21591d800aaaebef616b2cd986b2439d876
SHA512 549bf6c4fbfec12a15647ef1ba5edaa98ca46af2841d8e78f8e4e200fd9fd277d40fe004d93367a3ec5c1c29b25697ac442b6636285a6cbd2c1fe5bf9dbfe9a2
SSDEEP 1536:Sdyql1M7wIIEuti7rEYivykYkpaWj0OocG7mJAm/lGb3Lls:SdV1Z1i3QKqjGCJr/lf
TLSH
T1B2939E127AE180F2C48541BC1A9C8F54AB7BBC1445B9D903EB544A8BEFF22D2D73E316
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

31524

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

ws2_32

inet_addr gethostbyname WSAStartup gethostname

version

GetFileVersionInfoA VerQueryValueA GetFileVersionInfoSizeA

kernel32

GetCurrentProcessId GlobalAlloc ReadFile GetFileSize CreateFileA WriteFile GetCurrentDirectoryA GetWindowsDirectoryA GetSystemDirectoryA GetTempPathA lstrcatA lstrlenA OpenMutexA lstrcmpiA GetModuleFileNameA UnmapViewOfFile MapViewOfFile CreateFileMappingA GetCommandLineA CreateProcessA GetProcAddress LoadLibraryA GetModuleHandleA OpenEventA CopyFileA DeleteFileA MultiByteToWideChar WideCharToMultiByte OpenProcess VirtualFree lstrcmpA SetFilePointer SetFileAttributesA GetFileAttributesA CreateDirectoryA SetFileTime GetFileTime QueryPerformanceCounter GetTickCount GetCurrentThreadId GetSystemTimeAsFileTime DeviceIoControl GetVolumeInformationA GetDriveTypeA GetLogicalDrives GetVersionExA GetTimeZoneInformation GetSystemDefaultLCID ResumeThread SetPriorityClass GetCurrentProcess GetCurrentThread SetThreadPriority SetEndOfFile GetOEMCP LocalAlloc LocalFree SetEvent CreateMutexA GetLastError CreateEventA GlobalFree CreateThread CloseHandle SetCurrentDirectoryA WaitForSingleObject Sleep VirtualProtect GetSystemInfo LCMapStringA LCMapStringW HeapSize VirtualAlloc GetACP GetLocaleInfoA GetCPInfo GetStringTypeW GetStringTypeA FlushFileBuffers SetStdHandle VirtualQuery InterlockedExchange RtlUnwind InitializeCriticalSection GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings HeapAlloc HeapFree GetStartupInfoA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapDestroy HeapCreate HeapReAlloc SetHandleCount GetStdHandle GetFileType TlsAlloc SetLastError TlsFree TlsSetValue TlsGetValue ExitProcess TerminateProcess UnhandledExceptionFilter FreeEnvironmentStringsA

user32

wsprintfA

advapi32

QueryServiceStatus GetUserNameA ControlService CreateServiceA StartServiceA RegSetValueExA RegOpenKeyExA RegCloseKey OpenSCManagerA OpenServiceA CloseServiceHandle StartServiceCtrlDispatcherA RegisterServiceCtrlHandlerA OpenProcessToken GetTokenInformation AllocateAndInitializeSid EqualSid FreeSid SetServiceStatus

ole32

CoCreateInstance CoInitializeSecurity CoInitializeEx CoUninitialize

wininet

HttpQueryInfoA InternetGetConnectedState InternetOpenA InternetSetCookieA InternetOpenUrlA InternetReadFile InternetCloseHandle

urlmon

ObtainUserAgentString

iphlpapi

GetIpAddrTable GetNetworkParams GetAdaptersInfo GetIfEntry

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-01_85586f58c78c4e7d2a07e4b53ec56087_amadey_elex_manuscrypt_rhadamanthys_smoke-loader

ws2_32

version

kernel32

user32

advapi32

ole32

wininet

urlmon

iphlpapi

generic