General
- Target 2026-07-20_3bb69daa2540e2c6d399d4f438a239a9_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- Sample260720-l4trkad19j
- SHA256 58127e6edcf2cb466dcf71353c7698ebdbf4ff540a81c344d99aabc3ae0515ff
- MD5 3bb69daa2540e2c6d399d4f438a239a9
- SHA1 58844e520fb4c324c09c907ef15247e122d0c6a6
- SHA512 545300140934d1e8deaf34ba40ce1929c26d58017ce48f837db2c41c28b39ee392c88fcd3e702a547ff4706c9603dc12745b241669b9faf88b15feb9203a7fec
- SSDEEP 3072:vbuMGq4hOSOVjjsvYc+5Jir3nxRWjfprbhZ78aHxkihAh:TGq4sHVXA+SxgjlXrDc
- TLSH T1BEE3E1127991C472D043267058B496B3A56B346257FC42CBB7A91FBE6F706C09E3836F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_3bb69daa2540e2c6d399d4f438a239a9_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_3bb69daa2540e2c6d399d4f438a239a9_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win11ltsc2024-20260710-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_3bb69daa2540e2c6d399d4f438a239a9_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- SHA256 58127e6edcf2cb466dcf71353c7698ebdbf4ff540a81c344d99aabc3ae0515ff
- MD5 3bb69daa2540e2c6d399d4f438a239a9
- SHA1 58844e520fb4c324c09c907ef15247e122d0c6a6
- SHA512 545300140934d1e8deaf34ba40ce1929c26d58017ce48f837db2c41c28b39ee392c88fcd3e702a547ff4706c9603dc12745b241669b9faf88b15feb9203a7fec
- SSDEEP 3072:vbuMGq4hOSOVjjsvYc+5Jir3nxRWjfprbhZ78aHxkihAh:TGq4sHVXA+SxgjlXrDc
- TLSH T1BEE3E1127991C472D043267058B496B3A56B346257FC42CBB7A91FBE6F706C09E3836F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Executes dropped EXE
-
Suspicious use of SetThreadContext