0d715978543633d8b2eb9661c08c2c93f039418eb0754985c6a89e120270d114 | Triage

Submit
Reports

Overview

overview

7

Static

static

3

2025-03-30...er.exe

windows7-x64

7

2025-03-30...er.exe

windows10-2004-x64

7

Sharing

General

Target

2025-03-30_627bff73b072ecc872edc7aa2572dfb2_amadey_rhadamanthys_smoke-loader
Size

7.8MB
Sample

250330-tn86bastcx
MD5

627bff73b072ecc872edc7aa2572dfb2
SHA1

8cc229ae419780ca37fd28087e959a9f4574840a
SHA256

0d715978543633d8b2eb9661c08c2c93f039418eb0754985c6a89e120270d114
SHA512

0929a1cf0a64aa4458d1ffa1abcb9b8167ce0b48ae44c56647ba9329eefc176df025667a2280132d8912167e386ce8a8ab208ca59295885980721c6b7f95827e
SSDEEP

98304:HoqTB3Yle8vH5+pO5xLAqI+lBqyZyaUCQcyaEoA2M4dwqtTysyXVS4bGpCYP7T4X:f4eDpO7L6eQygaLpCYP71Hy9

Score

7^/10

discovery upx

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2025-03-30_627bff73b072ecc872edc7aa2572dfb2_amadey_rhadamanthys_smoke-loader.exe

Resource

win7-20241010-en

windows7-x64

24 signatures

150 seconds

Behavioral task

behavioral2

Sample

2025-03-30_627bff73b072ecc872edc7aa2572dfb2_amadey_rhadamanthys_smoke-loader.exe

Resource

win10v2004-20250314-en

windows10-2004-x64

11 signatures

150 seconds

Malware Config

Targets

- Target
  
  2025-03-30_627bff73b072ecc872edc7aa2572dfb2_amadey_rhadamanthys_smoke-loader
- Size
  
  7.8MB
- MD5
  
  627bff73b072ecc872edc7aa2572dfb2
- SHA1
  
  8cc229ae419780ca37fd28087e959a9f4574840a
- SHA256
  
  0d715978543633d8b2eb9661c08c2c93f039418eb0754985c6a89e120270d114
- SHA512
  
  0929a1cf0a64aa4458d1ffa1abcb9b8167ce0b48ae44c56647ba9329eefc176df025667a2280132d8912167e386ce8a8ab208ca59295885980721c6b7f95827e
- SSDEEP
  
  98304:HoqTB3Yle8vH5+pO5xLAqI+lBqyZyaUCQcyaEoA2M4dwqtTysyXVS4bGpCYP7T4X:f4eDpO7L6eQygaLpCYP71Hy9
Score

7^/10

discovery upx
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Network Service Discovery
  Attempt to gather information on host's network.
  discovery
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
- Drops file in System32 directory
- Enumerates processes with tasklist
  discovery
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

Network Share Discovery

Process Discovery

Query Registry

Remote System Discovery

System Information Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

© 2018-2025

Terms | Privacy