General
- Target 2026-07-20_9aacce15af6b60ed04879349c02b62da_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- Sample260720-p7vptac14z
- SHA256 6f3e5a8fbbe6dce1a32c42bc897a8a6b0e144bbea44e322719d8d372841a5f80
- MD5 9aacce15af6b60ed04879349c02b62da
- SHA1 ad5b3146f276fc6f730abbed2d51758612d14862
- SHA512 40355840c565690d9837fecdab00728417c6e62da076fc7274d25f886209e04961004939a3cd1e35143fbf7ea5c423d56cf0c9fec9071f5c16b76202354b941d
- SSDEEP 3072:vbuMGq4hOSOVljsvjbUFdH9+A7HqYioDmChPHyiNz9v:TGq4sHV1ebyF9+ALqYbB5SiNRv
- TLSH T1E5E3D0217920C871E12226305C7095F6A66B78A2277C01C7BBD91BFE2F705D1AE3D76B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_9aacce15af6b60ed04879349c02b62da_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_9aacce15af6b60ed04879349c02b62da_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win11ltsc2024-20260710-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_9aacce15af6b60ed04879349c02b62da_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- SHA256 6f3e5a8fbbe6dce1a32c42bc897a8a6b0e144bbea44e322719d8d372841a5f80
- MD5 9aacce15af6b60ed04879349c02b62da
- SHA1 ad5b3146f276fc6f730abbed2d51758612d14862
- SHA512 40355840c565690d9837fecdab00728417c6e62da076fc7274d25f886209e04961004939a3cd1e35143fbf7ea5c423d56cf0c9fec9071f5c16b76202354b941d
- SSDEEP 3072:vbuMGq4hOSOVljsvjbUFdH9+A7HqYioDmChPHyiNz9v:TGq4sHV1ebyF9+ALqYbB5SiNRv
- TLSH T1E5E3D0217920C871E12226305C7095F6A66B78A2277C01C7BBD91BFE2F705D1AE3D76B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Executes dropped EXE
-
Suspicious use of SetThreadContext