General
- Target 2026-05-28_6757073963b2a293ab6cb94f820df540_elex_magniber_rhadamanthys_smoke-loader_stop_tofsee
- Size 226KB
- Sample260528-qn4daagy6k
- SHA256 0a77c35ae35154e8351cf66c108ea3a1e4f7079b33da0fa202ac0525bb9780fe
- MD5 6757073963b2a293ab6cb94f820df540
- SHA1 73d3ec4c9ec0645a1b6b36c6714901a8ec1c1174
- SHA512 b604462eac4a8aaaddb2876b21b22609561db59518bcb8140ed771de6cd94fb6e816e4672db5b485bf78026f03b47243b4d0774d7cb8efbbcd44ae247e03b10d
- SSDEEP 3072:SMiDLXlL84l8jLANJiZmT6Rp5sjRakikR8PTZ0rt45DYXQKmdv3oeUuQIzL:JiDLXvujLfRwDDRCRYA1V
- TLSH T1AD346A6936C6D072D1A2307A0952DBB059AEF4210F695ACFBFD906363F306D5B372386
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-28_6757073963b2a293ab6cb94f820df540_elex_magniber_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-28_6757073963b2a293ab6cb94f820df540_elex_magniber_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win11-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-28_6757073963b2a293ab6cb94f820df540_elex_magniber_rhadamanthys_smoke-loader_stop_tofsee
- Size 226KB
- SHA256 0a77c35ae35154e8351cf66c108ea3a1e4f7079b33da0fa202ac0525bb9780fe
- MD5 6757073963b2a293ab6cb94f820df540
- SHA1 73d3ec4c9ec0645a1b6b36c6714901a8ec1c1174
- SHA512 b604462eac4a8aaaddb2876b21b22609561db59518bcb8140ed771de6cd94fb6e816e4672db5b485bf78026f03b47243b4d0774d7cb8efbbcd44ae247e03b10d
- SSDEEP 3072:SMiDLXlL84l8jLANJiZmT6Rp5sjRakikR8PTZ0rt45DYXQKmdv3oeUuQIzL:JiDLXvujLfRwDDRCRYA1V
- TLSH T1AD346A6936C6D072D1A2307A0952DBB059AEF4210F695ACFBFD906363F306D5B372386
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Adds Run key to start application
Suspicious use of SetThreadContext