General
- Target 2026-07-18_0c9464acf9d7107fd7e3428d61dd2704_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- Sample260718-n4ct6ady51
- SHA256 19c4b570520be9dd06c58a83a7ebd9e150583a68f8125decdd1068e461820693
- MD5 0c9464acf9d7107fd7e3428d61dd2704
- SHA1 cdb68d64391048a9545cb33a4c1ca73b16af2fd6
- SHA512 7f4fc6e211c8d8e037a0bc52b1f14c3525510c5b5171b447e55c62f096760df01fd80cba82d4fb596d40ef8daa7835d27ed5049d2818cc4675720b8b184b7f06
- SSDEEP 3072:vbuMGq4hOSOVgjsvEjM/Bhw0aqwuYwC24WorcYZ+OtlO:TGq4sHVgg/jJaONpQ+QE
- TLSH T173E3D02676918472D16332705C7596B7E22A79A123BC41CBB7881FBD1EB07C16E3836F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_0c9464acf9d7107fd7e3428d61dd2704_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_0c9464acf9d7107fd7e3428d61dd2704_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_0c9464acf9d7107fd7e3428d61dd2704_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- SHA256 19c4b570520be9dd06c58a83a7ebd9e150583a68f8125decdd1068e461820693
- MD5 0c9464acf9d7107fd7e3428d61dd2704
- SHA1 cdb68d64391048a9545cb33a4c1ca73b16af2fd6
- SHA512 7f4fc6e211c8d8e037a0bc52b1f14c3525510c5b5171b447e55c62f096760df01fd80cba82d4fb596d40ef8daa7835d27ed5049d2818cc4675720b8b184b7f06
- SSDEEP 3072:vbuMGq4hOSOVgjsvEjM/Bhw0aqwuYwC24WorcYZ+OtlO:TGq4sHVgg/jJaONpQ+QE
- TLSH T173E3D02676918472D16332705C7596B7E22A79A123BC41CBB7881FBD1EB07C16E3836F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Executes dropped EXE
-
Suspicious use of SetThreadContext