General
- Target 2026-07-17_f204e65e0c701757b80f95bf608bae04_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- Sample260717-wnf6msc19w
- SHA256 70b01e7dfc695728ff3b4edc2ab9dfc40422e5364f61c08e2fc5dd530d4c3b1f
- MD5 f204e65e0c701757b80f95bf608bae04
- SHA1 877e8bb1b138f3c25d6d6ac9590e9387c0d5bbaf
- SHA512 a692b05b35a46033fbbaabe3dc6ca8f385f92d07a334fda334e78eb95d2bfb493d8c95c41c4b92e3849c4c624392c2b46302016f15280199c3a2ffd5eda87ca0
- SSDEEP 3072:vbuMGq4hOSOVnjsv3yUqvYAjGiqkh5OAYzE7pLS5gKgDJVH72M:TGq4sHVjvU7AjfPh5O/ILS2L7z
- TLSH T130E3E125BA60D836E55322705CB482B6B62F749227B942CB779C1FBE5FB01C14E3871B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-17_f204e65e0c701757b80f95bf608bae04_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_f204e65e0c701757b80f95bf608bae04_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_f204e65e0c701757b80f95bf608bae04_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- SHA256 70b01e7dfc695728ff3b4edc2ab9dfc40422e5364f61c08e2fc5dd530d4c3b1f
- MD5 f204e65e0c701757b80f95bf608bae04
- SHA1 877e8bb1b138f3c25d6d6ac9590e9387c0d5bbaf
- SHA512 a692b05b35a46033fbbaabe3dc6ca8f385f92d07a334fda334e78eb95d2bfb493d8c95c41c4b92e3849c4c624392c2b46302016f15280199c3a2ffd5eda87ca0
- SSDEEP 3072:vbuMGq4hOSOVnjsv3yUqvYAjGiqkh5OAYzE7pLS5gKgDJVH72M:TGq4sHVjvU7AjfPh5O/ILS2L7z
- TLSH T130E3E125BA60D836E55322705CB482B6B62F749227B942CB779C1FBE5FB01C14E3871B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Executes dropped EXE
-
Suspicious use of SetThreadContext