General
- Target 2026-05-02_6bef1c0c4185b4038e222519ec1eea74_elex_rhadamanthys_smoke-loader_stop_zeus
- Size 512KB
- Sample260502-rd2blsh19x
- SHA256 f743b3a64711d89478487a7612fbce916305394c09a1ee7e18b261b53aa774a4
- MD5 6bef1c0c4185b4038e222519ec1eea74
- SHA1 eba09c3a20155e3bbe542a1f6175559e98778aee
- SHA512 857174d0cf32d12e7545071b74c8e6e4dff724cf712350f309cebb2916fe13a42a6fa836e09928d4f639f17ef1e21ac7b2754b0a24ac64d65e220bbfc3064f5b
- SSDEEP 12288:wi1x55UIEhlCXvkXVg8IBjLvl8NLrcgIHMlO:BGIEuvQERvWxrctHMlO
- TLSH T121B48D25F6ABD826D49606BF4091D97912B678138F82E62F3ACE0FCE0DF13D949056D3
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-02_6bef1c0c4185b4038e222519ec1eea74_elex_rhadamanthys_smoke-loader_stop_zeus.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-02_6bef1c0c4185b4038e222519ec1eea74_elex_rhadamanthys_smoke-loader_stop_zeus.exe
Resource
win11-20260130-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-02_6bef1c0c4185b4038e222519ec1eea74_elex_rhadamanthys_smoke-loader_stop_zeus
- Size 512KB
- SHA256 f743b3a64711d89478487a7612fbce916305394c09a1ee7e18b261b53aa774a4
- MD5 6bef1c0c4185b4038e222519ec1eea74
- SHA1 eba09c3a20155e3bbe542a1f6175559e98778aee
- SHA512 857174d0cf32d12e7545071b74c8e6e4dff724cf712350f309cebb2916fe13a42a6fa836e09928d4f639f17ef1e21ac7b2754b0a24ac64d65e220bbfc3064f5b
- SSDEEP 12288:wi1x55UIEhlCXvkXVg8IBjLvl8NLrcgIHMlO:BGIEuvQERvWxrctHMlO
- TLSH T121B48D25F6ABD826D49606BF4091D97912B678138F82E62F3ACE0FCE0DF13D949056D3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Gepys trojan
-
Event Triggered Execution: AppInit DLLs
Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
-
Executes dropped EXE
-
Loads dropped DLL