General
-
Target
2025-03-30_b925cc8ed81572a5a7982cd33f85bac7_amadey_rhadamanthys_smoke-loader
-
Size
400KB
-
Sample
250330-zwjtaaw1f1
-
MD5
b925cc8ed81572a5a7982cd33f85bac7
-
SHA1
c1fcd109db501c506a587272f16a1d07942f3a4a
-
SHA256
dcfffdd236b9b20b8fec3995f9199ff1964486d5943d7117a6796ea9adb1dc8f
-
SHA512
6360f7e976479de0060c2ae892de7877f11dbe3ae4171a149d756983d6cdf7386fcec944767a43c930f6db767679126aa71429c26362073c7cb86f1368e717e5
-
SSDEEP
12288:NNo836h2o8wE39uW8wESByvNv54B9f01Zm:V6h2o8wDW8wQvr4B9f01Zm
Behavioral task
behavioral1
Sample
2025-03-30_b925cc8ed81572a5a7982cd33f85bac7_amadey_rhadamanthys_smoke-loader.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2025-03-30_b925cc8ed81572a5a7982cd33f85bac7_amadey_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20250314-en
Malware Config
Extracted
berbew
http://viruslist.com/wcmd.txt
http://viruslist.com/ppslog.php
http://viruslist.com/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d
Targets
-
-
Target
2025-03-30_b925cc8ed81572a5a7982cd33f85bac7_amadey_rhadamanthys_smoke-loader
-
Size
400KB
-
MD5
b925cc8ed81572a5a7982cd33f85bac7
-
SHA1
c1fcd109db501c506a587272f16a1d07942f3a4a
-
SHA256
dcfffdd236b9b20b8fec3995f9199ff1964486d5943d7117a6796ea9adb1dc8f
-
SHA512
6360f7e976479de0060c2ae892de7877f11dbe3ae4171a149d756983d6cdf7386fcec944767a43c930f6db767679126aa71429c26362073c7cb86f1368e717e5
-
SSDEEP
12288:NNo836h2o8wE39uW8wESByvNv54B9f01Zm:V6h2o8wDW8wQvr4B9f01Zm
Score10/10-
Adds autorun key to be loaded by Explorer.exe on startup
-
Berbew family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-