2026-11-03_4a9ebd3782d8a458c39cb0595905e390_amadey_elex_rhadamanthys_smoke-loader

General

Target
2026-11-03_4a9ebd3782d8a458c39cb0595905e390_amadey_elex_rhadamanthys_smoke-loader
Size 1.0MB
Sample261104-1gv4faeg52
SHA256 5c7aa93ace44026d387c6282b892bd4706ff21e89fcf465d4863806ad88f41bd
MD5 4a9ebd3782d8a458c39cb0595905e390
SHA1 fe82564f005839db8df51296630adfa5c2565ba2
SHA512 064a493b78dc98a553861591d3acb8f91388648d2a999a0b1873344cda27994ffbc543cf4263c5005bb0701bb158bd639689d7a88ca14ed828f17e6e8fd468f2
SSDEEP 24576:nWlDds9kk96eVPjIgLIWDcg+TVWvEsfN93HUubciJ7Ju4:nAc7vwh+6uYiJ7h
TLSH
T1E635E0017A1481B5F4F619BF6EAB927D96363DE15B2080CF61CBF69A1A342D25C31337
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-03_4a9ebd3782d8a458c39cb0595905e390_amadey_elex_rhadamanthys_smoke-loader

File Explorer

2026-11-03_4a9ebd3782d8a458c39cb0595905e390_amadey_elex_rhadamanthys_smoke-loader

.exe 1.0MB

2026-11-03_4a9ebd3782d8a458c39cb0595905e390_amadey_elex_rhadamanthys_smoke-loader

IMPHASH 95eaf4fd2fbe9d4cd7d4ba331c148b36
SHA256 5c7aa93ace44026d387c6282b892bd4706ff21e89fcf465d4863806ad88f41bd
MD5 4a9ebd3782d8a458c39cb0595905e390
SHA1 fe82564f005839db8df51296630adfa5c2565ba2
SHA512 064a493b78dc98a553861591d3acb8f91388648d2a999a0b1873344cda27994ffbc543cf4263c5005bb0701bb158bd639689d7a88ca14ed828f17e6e8fd468f2
SSDEEP 24576:nWlDds9kk96eVPjIgLIWDcg+TVWvEsfN93HUubciJ7Ju4:nAc7vwh+6uYiJ7h
TLSH
T1E635E0017A1481B5F4F619BF6EAB927D96363DE15B2080CF61CBF69A1A342D25C31337
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

25232

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\fon\kumela\zofejuti\sop.pdb

kernel32

GetComputerNameA FillConsoleOutputCharacterA GetPrivateProfileSectionNamesW GetFileSize SetPriorityClass WriteConsoleInputW lstrlenA TlsGetValue FindResourceExW SetConsoleTextAttribute SetEnvironmentVariableW GetModuleHandleExW SetComputerNameW AddConsoleAliasW CreateDirectoryExA CallNamedPipeW FreeEnvironmentStringsA GetCurrentThread GetConsoleAliasesLengthA EnumTimeFormatsA SetProcessPriorityBoost ActivateActCtx LoadLibraryW ReadConsoleInputA SetVolumeMountPointA GetVersionExW GetFileAttributesA SetConsoleMode WriteConsoleW WritePrivateProfileSectionW IsDBCSLeadByte CompareStringW SetThreadPriority VerifyVersionInfoW ReleaseActCtx SetCurrentDirectoryA SetThreadLocale GetStdHandle FindFirstFileExA GetHandleInformation GetLastError GetCurrentDirectoryW GetProcAddress GetProcessHeaps MoveFileW CopyFileA SetStdHandle LoadLibraryA OpenMutexA ProcessIdToSessionId OpenWaitableTimerW LocalAlloc DnsHostnameToComputerNameA SetFileApisToANSI WriteProfileSectionW AddAtomA GlobalWire SetConsoleCursorInfo DebugSetProcessKillOnExit SetConsoleTitleW ContinueDebugEvent BuildCommDCBA VirtualProtect CompareStringA SetProcessShutdownParameters OpenSemaphoreW GetVersionExA LocalSize FindAtomW GetWindowsDirectoryW FindActCtxSectionStringW ReadConsoleOutputCharacterW OpenFileMappingA GlobalReAlloc GetProfileSectionW CommConfigDialogW GetVolumeInformationW CloseHandle CreateFileW LCMapStringW InterlockedIncrement InterlockedDecrement InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection EncodePointer DecodePointer DeleteFileA GetModuleHandleW ExitProcess MultiByteToWideChar GetCommandLineA HeapSetInformation GetStartupInfoW GetModuleFileNameW HeapValidate IsBadReadPtr RaiseException RtlUnwind IsProcessorFeaturePresent TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount WriteFile GetACP GetOEMCP GetCPInfo IsValidCodePage TlsAlloc TlsSetValue GetCurrentThreadId TlsFree SetLastError QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate OutputDebugStringA OutputDebugStringW HeapAlloc HeapReAlloc HeapSize HeapQueryInformation HeapFree GetStringTypeW SetFilePointer GetConsoleCP GetConsoleMode FlushFileBuffers

user32

GetComboBoxInfo GetMenuBarInfo

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-03_4a9ebd3782d8a458c39cb0595905e390_amadey_elex_rhadamanthys_smoke-loader

kernel32

user32

generic