General
- Target 2026-07-17_35c4fa48484f61b9d28460b5277b5e2e_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- Sample260717-vr4wfagv7p
- SHA256 3726e93063c32cedfaf9d0b9aedff4dc0bcef2ff55783820fc17dbfe89bc9c97
- MD5 35c4fa48484f61b9d28460b5277b5e2e
- SHA1 3d06d779314bceea49742a2510b9c6fcb554b06c
- SHA512 109e64ac75ef87113d7631c369ab6a73f841669542665eb177349d514e816f188c8a7331fcf3f2da0889a72fcb80a21cd05d91691e4bed7947afb31553cefc85
- SSDEEP 3072:vbuMGq4hOSOVKjsvihFvpnWDk73eLiyjYHQ5PVMUgcmCHX:TGq4sHV25WI7giZw5PVMU333
- TLSH T18FE3E025BA91D073D1622A3049B1D6B2A26BB922537C45CB77E80FBE9E705C15F3C31E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-17_35c4fa48484f61b9d28460b5277b5e2e_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_35c4fa48484f61b9d28460b5277b5e2e_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_35c4fa48484f61b9d28460b5277b5e2e_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- SHA256 3726e93063c32cedfaf9d0b9aedff4dc0bcef2ff55783820fc17dbfe89bc9c97
- MD5 35c4fa48484f61b9d28460b5277b5e2e
- SHA1 3d06d779314bceea49742a2510b9c6fcb554b06c
- SHA512 109e64ac75ef87113d7631c369ab6a73f841669542665eb177349d514e816f188c8a7331fcf3f2da0889a72fcb80a21cd05d91691e4bed7947afb31553cefc85
- SSDEEP 3072:vbuMGq4hOSOVKjsvihFvpnWDk73eLiyjYHQ5PVMUgcmCHX:TGq4sHV25WI7giZw5PVMU333
- TLSH T18FE3E025BA91D073D1622A3049B1D6B2A26BB922537C45CB77E80FBE9E705C15F3C31E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Executes dropped EXE
-
Suspicious use of SetThreadContext