General
- Target 2026-07-20_1d8588658c5a0eb41d2cf0c6b7e741c4_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- Sample260720-mff18sew9k
- SHA256 16157f31724d6b4f33e5a6ce2b718d74b911802796c9a49f21fc97cb0efb3271
- MD5 1d8588658c5a0eb41d2cf0c6b7e741c4
- SHA1 28f2160ed18fa41a2ba5a3faabb07ceda4f91321
- SHA512 68f91630ea6cec0fff670ee90dce10c5b5cee46ed1290724378356df689bbd7dd707aa4675003f93228ebec16754c7a7a5b365a2ea5d6c9d998fc09e74492965
- SSDEEP 3072:vbuMGq4hOSOVXjsvMuwUWCR/W5G+I37NOs3xprUC/eHsW:TGq4sHVTKwDAe5GvNOQrJ/eHsW
- TLSH T109E3D0227980C171E1A326715C7092B7A62B796217B482CF7B981FBD6F706C15E3832E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_1d8588658c5a0eb41d2cf0c6b7e741c4_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_1d8588658c5a0eb41d2cf0c6b7e741c4_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_1d8588658c5a0eb41d2cf0c6b7e741c4_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- SHA256 16157f31724d6b4f33e5a6ce2b718d74b911802796c9a49f21fc97cb0efb3271
- MD5 1d8588658c5a0eb41d2cf0c6b7e741c4
- SHA1 28f2160ed18fa41a2ba5a3faabb07ceda4f91321
- SHA512 68f91630ea6cec0fff670ee90dce10c5b5cee46ed1290724378356df689bbd7dd707aa4675003f93228ebec16754c7a7a5b365a2ea5d6c9d998fc09e74492965
- SSDEEP 3072:vbuMGq4hOSOVXjsvMuwUWCR/W5G+I37NOs3xprUC/eHsW:TGq4sHVTKwDAe5GvNOQrJ/eHsW
- TLSH T109E3D0227980C171E1A326715C7092B7A62B796217B482CF7B981FBD6F706C15E3832E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Executes dropped EXE
-
Suspicious use of SetThreadContext