General
- Target 2026-07-06_3c3f395229c4670d9fe8cdf3378da36d_amadey_elex_rhadamanthys_smoke-loader_stop
- Size 1.2MB
- Sample260706-nhwp5sat3p
- SHA256 b1bdae5544d085f6575f224c32d508aee140c7b38fab0c5ab8f33824589a6d0d
- MD5 3c3f395229c4670d9fe8cdf3378da36d
- SHA1 55d7d5a551f09e1548baf61ddac89ba085bbd8d5
- SHA512 ff67c5933f10ec8eb30fd080c999ba94bef27a4170105bb84af9e7c0f797db3a4b2303e42b2358522142c1726f180f009d3dbd5b0dcd654ecfa8b5e0fed55da6
- SSDEEP 12288:/OTzx4gNnmGquqIr41H7o3drt0Y+Y3zWrHzXKYiTs1f:/A7Nnm5uqLazZn3zAj9
- TLSH T12855121A7453C133EC064A71935085C06BFE9D8375E2526FFF15AD4F0AF52A88A1AAF4
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_3c3f395229c4670d9fe8cdf3378da36d_amadey_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_3c3f395229c4670d9fe8cdf3378da36d_amadey_elex_rhadamanthys_smoke-loader_stop
- Size 1.2MB
- SHA256 b1bdae5544d085f6575f224c32d508aee140c7b38fab0c5ab8f33824589a6d0d
- MD5 3c3f395229c4670d9fe8cdf3378da36d
- SHA1 55d7d5a551f09e1548baf61ddac89ba085bbd8d5
- SHA512 ff67c5933f10ec8eb30fd080c999ba94bef27a4170105bb84af9e7c0f797db3a4b2303e42b2358522142c1726f180f009d3dbd5b0dcd654ecfa8b5e0fed55da6
- SSDEEP 12288:/OTzx4gNnmGquqIr41H7o3drt0Y+Y3zWrHzXKYiTs1f:/A7Nnm5uqLazZn3zAj9
- TLSH T12855121A7453C133EC064A71935085C06BFE9D8375E2526FFF15AD4F0AF52A88A1AAF4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1