General
- Target 2026-07-18_0864634352741c3f8c09e92f53748ac1_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- Sample260718-kw28asew8l
- SHA256 b2f9f6c1726880a0937e3a6d54565fc89a605aef68efc6a7d24096dbeb0a3766
- MD5 0864634352741c3f8c09e92f53748ac1
- SHA1 a6a2e8d82aeed365d413f71f9d73a8a9bd4f6910
- SHA512 daf11772cb758443f88c3fa8b4ab79b40bbb4baed5f6871f5ab2b390cc1f38ee8682f32453c3b50f94d96e3443bf33aec865c0a529fae16991705fcffd134947
- SSDEEP 3072:vbuMGq4hOSOVYjsvt+N0vHC32kljFo1POCUO9QSI4NiSuiAXDB:TGq4sHV4Ss0fC3tljkFA53B
- TLSH T1F7E3E025BA90C1B2E06225305C75D6B2966F796107BC42CBB7A81FBD5FA03C19E3831F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_0864634352741c3f8c09e92f53748ac1_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_0864634352741c3f8c09e92f53748ac1_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_0864634352741c3f8c09e92f53748ac1_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- SHA256 b2f9f6c1726880a0937e3a6d54565fc89a605aef68efc6a7d24096dbeb0a3766
- MD5 0864634352741c3f8c09e92f53748ac1
- SHA1 a6a2e8d82aeed365d413f71f9d73a8a9bd4f6910
- SHA512 daf11772cb758443f88c3fa8b4ab79b40bbb4baed5f6871f5ab2b390cc1f38ee8682f32453c3b50f94d96e3443bf33aec865c0a529fae16991705fcffd134947
- SSDEEP 3072:vbuMGq4hOSOVYjsvt+N0vHC32kljFo1POCUO9QSI4NiSuiAXDB:TGq4sHV4Ss0fC3tljkFA53B
- TLSH T1F7E3E025BA90C1B2E06225305C75D6B2966F796107BC42CBB7A81FBD5FA03C19E3831F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Executes dropped EXE
-
Suspicious use of SetThreadContext