General
- Target 2026-07-11_328031de9f27330b5265ea2db64f6c8c_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- Sample260711-va8s3ahs8v
- SHA256 3a43ac7faa45bd1e121cdb57484e0f49e07cd7dafccda9e3ff9ec14e440d31f4
- MD5 328031de9f27330b5265ea2db64f6c8c
- SHA1 0e60b914bb1bda60ecb1af8a0d18c8f021200458
- SHA512 f3d53c023bce942444e3b5e4be3200dcafeb2ab8ebd4e313574ac073cbe05c8dd1f991d0bb02dc347aaaa0fcc196e2354ac147befc369761154f4779a975b9df
- SSDEEP 3072:vbuMGq4hOSOVIjsvex+jzD58Q+NjSbDVIAVnvOCzGB2IxiBld/:TGq4sHVorUTcDA4hUBlZ
- TLSH T133E3E0267B918836E2562B705C71C1B2E61B756253B841CB77982FBD5FA06C09E3C32F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-11_328031de9f27330b5265ea2db64f6c8c_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-11_328031de9f27330b5265ea2db64f6c8c_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_328031de9f27330b5265ea2db64f6c8c_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- SHA256 3a43ac7faa45bd1e121cdb57484e0f49e07cd7dafccda9e3ff9ec14e440d31f4
- MD5 328031de9f27330b5265ea2db64f6c8c
- SHA1 0e60b914bb1bda60ecb1af8a0d18c8f021200458
- SHA512 f3d53c023bce942444e3b5e4be3200dcafeb2ab8ebd4e313574ac073cbe05c8dd1f991d0bb02dc347aaaa0fcc196e2354ac147befc369761154f4779a975b9df
- SSDEEP 3072:vbuMGq4hOSOVIjsvex+jzD58Q+NjSbDVIAVnvOCzGB2IxiBld/:TGq4sHVorUTcDA4hUBlZ
- TLSH T133E3E0267B918836E2562B705C71C1B2E61B756253B841CB77982FBD5FA06C09E3C32F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Executes dropped EXE
-
Suspicious use of SetThreadContext