General
- Target 2026-07-17_a7abe17781cf9c1f03d766ed35b66039_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- Sample260718-c4e4qshs2t
- SHA256 3b7838976b421db96ef40ad7fff1a664414e4ba5d73bbba85bc7899b67586eca
- MD5 a7abe17781cf9c1f03d766ed35b66039
- SHA1 4f6aa7aa7b118cdbe522df7cb893c222341d1c17
- SHA512 665a26939c1eef782159cb9f134122b3cb94ed48ea8714e1e0240c02dad3e507ba0675edfcc584242764af12a9107b2e296c964981400e8f8a674f3327c3fe4c
- SSDEEP 3072:vbuMGq4hOSOVKjsvWqxG5GsA88QTK+YcPVX43W06FZ7tSqZY:TGq4sHV2LMG5hXZTK+Ycda6FZ7bY
- TLSH T181E3E0257991D472E4A326309874A7F3B52B796223B841DB77981FBE1E702C14F3836B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-17_a7abe17781cf9c1f03d766ed35b66039_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_a7abe17781cf9c1f03d766ed35b66039_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_a7abe17781cf9c1f03d766ed35b66039_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- SHA256 3b7838976b421db96ef40ad7fff1a664414e4ba5d73bbba85bc7899b67586eca
- MD5 a7abe17781cf9c1f03d766ed35b66039
- SHA1 4f6aa7aa7b118cdbe522df7cb893c222341d1c17
- SHA512 665a26939c1eef782159cb9f134122b3cb94ed48ea8714e1e0240c02dad3e507ba0675edfcc584242764af12a9107b2e296c964981400e8f8a674f3327c3fe4c
- SSDEEP 3072:vbuMGq4hOSOVKjsvWqxG5GsA88QTK+YcPVX43W06FZ7tSqZY:TGq4sHV2LMG5hXZTK+Ycda6FZ7bY
- TLSH T181E3E0257991D472E4A326309874A7F3B52B796223B841DB77981FBE1E702C14F3836B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Executes dropped EXE
-
Suspicious use of SetThreadContext