General
- Target 2026-07-15_6963b8af53a96e27c54144124b1d0e18_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- Sample260715-fgfcrsbz4k
- SHA256 90c00cd9f9f8fb5b435a573e1e277c6d803c8da421dd0960933b9c0e1b380fe8
- MD5 6963b8af53a96e27c54144124b1d0e18
- SHA1 d0b5b88d6c6f140662d64eb6395c14f91149dd8a
- SHA512 38093179ad2e27d9735b66f77e39178ec3d9e7767dc08dacebbbf4bb9d043a5c56f8e7a68b1918b3a9b02d90d808f35abfa9a11d456051177b6a97fbe19427a3
- SSDEEP 3072:vbuMGq4hOSOV4jsvdXu6Rzbq7ZykhXwbXKlNCHAAP2n3/eMBA5o:TGq4sHVYkugzbdkh0aloH5P2n3/eNS
- TLSH T1F2E3E026B650E176E4A225709DB1DAB3A66F7821177401DFB3891FBE9F705C04E3432B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-15_6963b8af53a96e27c54144124b1d0e18_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_6963b8af53a96e27c54144124b1d0e18_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_6963b8af53a96e27c54144124b1d0e18_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- SHA256 90c00cd9f9f8fb5b435a573e1e277c6d803c8da421dd0960933b9c0e1b380fe8
- MD5 6963b8af53a96e27c54144124b1d0e18
- SHA1 d0b5b88d6c6f140662d64eb6395c14f91149dd8a
- SHA512 38093179ad2e27d9735b66f77e39178ec3d9e7767dc08dacebbbf4bb9d043a5c56f8e7a68b1918b3a9b02d90d808f35abfa9a11d456051177b6a97fbe19427a3
- SSDEEP 3072:vbuMGq4hOSOV4jsvdXu6Rzbq7ZykhXwbXKlNCHAAP2n3/eMBA5o:TGq4sHVYkugzbdkh0aloH5P2n3/eNS
- TLSH T1F2E3E026B650E176E4A225709DB1DAB3A66F7821177401DFB3891FBE9F705C04E3432B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Executes dropped EXE
-
Suspicious use of SetThreadContext