General
- Target 2026-07-14_aa770ee8b281bb180f20e9e03c33bd9f_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- Sample260714-xaxf5sbs8r
- SHA256 d8561f8e14337a3fbb7faa519d246d65ef3b381aabb8a329499acb05119d0b2c
- MD5 aa770ee8b281bb180f20e9e03c33bd9f
- SHA1 e8669fff343484edfdd640820ed46d99aa663323
- SHA512 483f8caa72396b068dacb7c45eac858647fb61c9eeb6c40d088a9fd989cf159980f53cd2eaf4007b8d60abd47a83dafaede974e7f10fe01ad8869345baf8e6b6
- SSDEEP 3072:vbuMGq4hOSOVvjsvEUp7N/Pk6eLjb+SZwuUyQiaa8b7fR7xfewCb/X:TGq4sHVLS7NXkLaSZpHaa8bTnFCb/X
- TLSH T191E3D026BA909072D16332305871D6F3A56BB96103B845CB7B691FBE9F702C05B3D36B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_aa770ee8b281bb180f20e9e03c33bd9f_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_aa770ee8b281bb180f20e9e03c33bd9f_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win11ltsc2024-20260710-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_aa770ee8b281bb180f20e9e03c33bd9f_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- SHA256 d8561f8e14337a3fbb7faa519d246d65ef3b381aabb8a329499acb05119d0b2c
- MD5 aa770ee8b281bb180f20e9e03c33bd9f
- SHA1 e8669fff343484edfdd640820ed46d99aa663323
- SHA512 483f8caa72396b068dacb7c45eac858647fb61c9eeb6c40d088a9fd989cf159980f53cd2eaf4007b8d60abd47a83dafaede974e7f10fe01ad8869345baf8e6b6
- SSDEEP 3072:vbuMGq4hOSOVvjsvEUp7N/Pk6eLjb+SZwuUyQiaa8b7fR7xfewCb/X:TGq4sHVLS7NXkLaSZpHaa8bTnFCb/X
- TLSH T191E3D026BA909072D16332305871D6F3A56BB96103B845CB7B691FBE9F702C05B3D36B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Executes dropped EXE
-
Suspicious use of SetThreadContext