General
- Target 2026-07-11_7d0b7639843314b310a66e3d3921acc3_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- Sample260711-qa9cdabs9n
- SHA256 9ee3cf8a28dfe1e9ce334676bbc2aab5b8eb0e106f3f704091b793f9e4862056
- MD5 7d0b7639843314b310a66e3d3921acc3
- SHA1 dcb713d002b4fcbf214e13963e2c5333538debf2
- SHA512 f4b1c688368272746f37cc20a8f770796efe90671ec89e467e8f15f0719a86ebc975780f270d3ac46c2f81adc656b4a9f91d756d0bf89c6c1f6ecfe91647d912
- SSDEEP 3072:vbuMGq4hOSOVkjsvztWmYzcnqijnL2XSM+lo6OGo:TGq4sHVchcnvJMh6OP
- TLSH T16DE3D022BAA1D871D06222705975C6B3A62F796163B801CB77CC1BBE5FB05C15F3C36A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-11_7d0b7639843314b310a66e3d3921acc3_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-11_7d0b7639843314b310a66e3d3921acc3_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_7d0b7639843314b310a66e3d3921acc3_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- SHA256 9ee3cf8a28dfe1e9ce334676bbc2aab5b8eb0e106f3f704091b793f9e4862056
- MD5 7d0b7639843314b310a66e3d3921acc3
- SHA1 dcb713d002b4fcbf214e13963e2c5333538debf2
- SHA512 f4b1c688368272746f37cc20a8f770796efe90671ec89e467e8f15f0719a86ebc975780f270d3ac46c2f81adc656b4a9f91d756d0bf89c6c1f6ecfe91647d912
- SSDEEP 3072:vbuMGq4hOSOVkjsvztWmYzcnqijnL2XSM+lo6OGo:TGq4sHVchcnvJMh6OP
- TLSH T16DE3D022BAA1D871D06222705975C6B3A62F796163B801CB77CC1BBE5FB05C15F3C36A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Executes dropped EXE
-
Suspicious use of SetThreadContext