General
- Target 2026-07-17_14b9181c8341c9a4d5ac98070d89401b_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- Sample260718-fenalabz7w
- SHA256 405a4c217ce69a5ba3744777e067f1d8ecdee11fbc64154c6b9d572566bd5e16
- MD5 14b9181c8341c9a4d5ac98070d89401b
- SHA1 ec0aad987df22ad2372df6976960b6f7e85db73a
- SHA512 6c0faca26db77fb4a080c916c16827a08aa68297572b28e93388d497548138e79d814be733c22e4591ebedc762ceb0f88db14885355a709d82583ea7a0c2f911
- SSDEEP 3072:vbuMGq4hOSOV5jsvZ59TttYDMSWI4hLsCxQ:TGq4sHVB673KMjIC8
- TLSH T155E3D015B990C872E0A32A709C7096B2B96F796117B806D7B7881FBE5E702C15F3C35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-17_14b9181c8341c9a4d5ac98070d89401b_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_14b9181c8341c9a4d5ac98070d89401b_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_14b9181c8341c9a4d5ac98070d89401b_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- SHA256 405a4c217ce69a5ba3744777e067f1d8ecdee11fbc64154c6b9d572566bd5e16
- MD5 14b9181c8341c9a4d5ac98070d89401b
- SHA1 ec0aad987df22ad2372df6976960b6f7e85db73a
- SHA512 6c0faca26db77fb4a080c916c16827a08aa68297572b28e93388d497548138e79d814be733c22e4591ebedc762ceb0f88db14885355a709d82583ea7a0c2f911
- SSDEEP 3072:vbuMGq4hOSOV5jsvZ59TttYDMSWI4hLsCxQ:TGq4sHVB673KMjIC8
- TLSH T155E3D015B990C872E0A32A709C7096B2B96F796117B806D7B7881FBE5E702C15F3C35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Executes dropped EXE
-
Suspicious use of SetThreadContext