General
- Target 2026-07-09_12ba8ffac4c4c0aee63db47f5b8efa8d_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- Sample260709-wphe4afs8n
- SHA256 f09a9eec0fc5073139f7ec5ffbb286099309336bcbb9b18c3bc5ab172911629c
- MD5 12ba8ffac4c4c0aee63db47f5b8efa8d
- SHA1 aedec54d3e913568ef2265c59589d5cb59fded06
- SHA512 50eb668bb5d33cf00d766bfeeee54fd43026364d3876a18bc899eb716e0531b081899388597736184378c2e9b49037b4104765fec94bdf02d86b60b7c8051a52
- SSDEEP 3072:vbuMGq4hOSOV/jsvpcsgrNkwrSwcPN7Xpf+FV+S3OB:TGq4sHVbNsgrNkwrSr9E/G
- TLSH T13DE3E025BA918072D59325304CB4C2F2E61E767127B840CBB7591FBE5F706C29F3836A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_12ba8ffac4c4c0aee63db47f5b8efa8d_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_12ba8ffac4c4c0aee63db47f5b8efa8d_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win11ltsc2024-20260706-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_12ba8ffac4c4c0aee63db47f5b8efa8d_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- SHA256 f09a9eec0fc5073139f7ec5ffbb286099309336bcbb9b18c3bc5ab172911629c
- MD5 12ba8ffac4c4c0aee63db47f5b8efa8d
- SHA1 aedec54d3e913568ef2265c59589d5cb59fded06
- SHA512 50eb668bb5d33cf00d766bfeeee54fd43026364d3876a18bc899eb716e0531b081899388597736184378c2e9b49037b4104765fec94bdf02d86b60b7c8051a52
- SSDEEP 3072:vbuMGq4hOSOV/jsvpcsgrNkwrSwcPN7Xpf+FV+S3OB:TGq4sHVbNsgrNkwrSr9E/G
- TLSH T13DE3E025BA918072D59325304CB4C2F2E61E767127B840CBB7591FBE5F706C29F3836A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Executes dropped EXE
-
Suspicious use of SetThreadContext