2026-11-05_8b2d4be6b922f763cffdf28eb96fc3c3_amadey_elex_rhadamanthys_smoke-loader

General

Target
2026-11-05_8b2d4be6b922f763cffdf28eb96fc3c3_amadey_elex_rhadamanthys_smoke-loader
Size 10.8MB
Sample261106-vg2y4acd55
SHA256 c15d4d1d965c0977736dd64ec74ef97a017eb4b6afe6c2ac2f1460806ec6e072
MD5 8b2d4be6b922f763cffdf28eb96fc3c3
SHA1 152ed7bb8e66361408cabd8a0374f50f51eadd29
SHA512 140c525c1463a999fc8cc9a6384cbf711184b3c1020e42bb72cdbbfd2c938d6e214c3d1aa2a2227a2eb50d2c0f6dee230b72253c139661378989daa265d2430b
SSDEEP 98304:NUJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJZ:N
TLSH
T174B65BCA92049E50CE4525BFA873CD1E876CEA6AAF50057637E037882E7439754A373F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-05_8b2d4be6b922f763cffdf28eb96fc3c3_amadey_elex_rhadamanthys_smoke-loader

File Explorer

2026-11-05_8b2d4be6b922f763cffdf28eb96fc3c3_amadey_elex_rhadamanthys_smoke-loader

.exe 10.8MB

2026-11-05_8b2d4be6b922f763cffdf28eb96fc3c3_amadey_elex_rhadamanthys_smoke-loader

IMPHASH 33dfc009243defe961937168fecb2ce7
SHA256 c15d4d1d965c0977736dd64ec74ef97a017eb4b6afe6c2ac2f1460806ec6e072
MD5 8b2d4be6b922f763cffdf28eb96fc3c3
SHA1 152ed7bb8e66361408cabd8a0374f50f51eadd29
SHA512 140c525c1463a999fc8cc9a6384cbf711184b3c1020e42bb72cdbbfd2c938d6e214c3d1aa2a2227a2eb50d2c0f6dee230b72253c139661378989daa265d2430b
SSDEEP 98304:NUJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJZ:N
TLSH
T174B65BCA92049E50CE4525BFA873CD1E876CEA6AAF50057637E037882E7439754A373F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

9924

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapAlloc ClearCommError SetConsoleTextAttribute SetConsoleScreenBufferSize SleepEx _lclose GetModuleHandleW GetTickCount GetCommConfig GetWindowsDirectoryA GetVolumePathNameW OpenProcess FatalAppExitW GetSystemPowerStatus EnumSystemCodePagesA GetAtomNameW EnumResourceLanguagesA GetModuleFileNameW MultiByteToWideChar GetConsoleOutputCP FindFirstFileExA BuildCommDCBAndTimeoutsA GetLongPathNameW GetProcAddress SetVolumeLabelW ProcessIdToSessionId GetProcessWorkingSetSize LocalAlloc SetCalendarInfoW SetFileApisToANSI FindAtomA RtlCaptureStackBackTrace SetNamedPipeHandleState RequestWakeupLatency EnumDateFormatsW PeekConsoleInputA GetVolumeNameForVolumeMountPointW EnumSystemLocalesW lstrcpyW lstrcpyA GetDefaultCommConfigW RtlCaptureContext GetConsoleAliasesLengthW GetLastError lstrlenA GetCommandLineW HeapSetInformation GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount EncodePointer DecodePointer RtlUnwind SetHandleCount GetStdHandle GetFileType DeleteCriticalSection SetFilePointer HeapFree CloseHandle ExitProcess WriteFile FreeEnvironmentStringsW GetEnvironmentStringsW TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime Sleep CreateFileA SetStdHandle WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers LoadLibraryW GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc SetEndOfFile GetProcessHeap ReadFile IsProcessorFeaturePresent WriteConsoleW HeapSize LCMapStringW GetStringTypeW CreateFileW

user32

GetCaretPos

advapi32

EnumServicesStatusW DeregisterEventSource SetThreadToken CloseEventLog

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-05_8b2d4be6b922f763cffdf28eb96fc3c3_amadey_elex_rhadamanthys_smoke-loader

kernel32

user32

advapi32

generic