General
- Target 2026-07-20_559be8fa48c45192a5a9b58dbc083525_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- Sample260720-dnb8ksdv8q
- SHA256 f984a1dd8fef83c51ac3bbe6553da32a2a02b45f8c3f7bccd8a234786d302df6
- MD5 559be8fa48c45192a5a9b58dbc083525
- SHA1 52024e5cf0bbb2d708975a630ca442bad90143c7
- SHA512 7dd92998a9343af2ca7fa994a155f67b4231b9e2dea22ba237cb0a229b58b47dccfede4a53de4cf9bcc32804e269879b34e2bf350062219f43dda79fa6f39b04
- SSDEEP 3072:vbuMGq4hOSOVSjsvOvwVHyrr50H5p0b9E+xn45pr2:TGq4sHV+HvwVHyr1g5p0b9E+xn45B2
- TLSH T1B9E3E0217691D872D0A266709CA496B2A52F756117BC46CBB7890FBE6F702C14F3832F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_559be8fa48c45192a5a9b58dbc083525_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_559be8fa48c45192a5a9b58dbc083525_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_559be8fa48c45192a5a9b58dbc083525_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- SHA256 f984a1dd8fef83c51ac3bbe6553da32a2a02b45f8c3f7bccd8a234786d302df6
- MD5 559be8fa48c45192a5a9b58dbc083525
- SHA1 52024e5cf0bbb2d708975a630ca442bad90143c7
- SHA512 7dd92998a9343af2ca7fa994a155f67b4231b9e2dea22ba237cb0a229b58b47dccfede4a53de4cf9bcc32804e269879b34e2bf350062219f43dda79fa6f39b04
- SSDEEP 3072:vbuMGq4hOSOVSjsvOvwVHyrr50H5p0b9E+xn45pr2:TGq4sHV+HvwVHyr1g5p0b9E+xn45B2
- TLSH T1B9E3E0217691D872D0A266709CA496B2A52F756117BC46CBB7890FBE6F702C14F3832F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Executes dropped EXE
-
Suspicious use of SetThreadContext