General
- Target 2026-07-08_0ecf3ab3753a0909fd286ffe81667dec_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- Sample260708-zvbraahs2l
- SHA256 f9e6f956af0399385a9345b1114fafb183ae6790bad82a7b9fe43e7d3e10265b
- MD5 0ecf3ab3753a0909fd286ffe81667dec
- SHA1 43cbd25199914cc4bad60618a5cf788fb8f74793
- SHA512 c5c66fc1f9db446188405d11a4b46e8ef14dfe66c9a7fa64cedbf8e141d3b1f9cd83d2a9e7f4dac5b8e879a23bb029fceb75107fc3dbd78296f0bcb0a09335eb
- SSDEEP 3072:vbuMGq4hOSOVUjsvjBh4qsmmz1KgfTXzRY910K80eikiy:TGq4sHVMKBh4qnmNf560vmy
- TLSH T102E3D1267A51D432E19725705C71D9B3A62B78A113B802C77B9D1FBE5FB02C24A3836F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_0ecf3ab3753a0909fd286ffe81667dec_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_0ecf3ab3753a0909fd286ffe81667dec_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win11ltsc2024-20260706-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_0ecf3ab3753a0909fd286ffe81667dec_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- SHA256 f9e6f956af0399385a9345b1114fafb183ae6790bad82a7b9fe43e7d3e10265b
- MD5 0ecf3ab3753a0909fd286ffe81667dec
- SHA1 43cbd25199914cc4bad60618a5cf788fb8f74793
- SHA512 c5c66fc1f9db446188405d11a4b46e8ef14dfe66c9a7fa64cedbf8e141d3b1f9cd83d2a9e7f4dac5b8e879a23bb029fceb75107fc3dbd78296f0bcb0a09335eb
- SSDEEP 3072:vbuMGq4hOSOVUjsvjBh4qsmmz1KgfTXzRY910K80eikiy:TGq4sHVMKBh4qnmNf560vmy
- TLSH T102E3D1267A51D432E19725705C71D9B3A62B78A113B802C77B9D1FBE5FB02C24A3836F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Executes dropped EXE
-
Suspicious use of SetThreadContext