General
- Target 2026-07-20_22e17e22266235e641795f95ebcc7970_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- Sample260720-qlft7sdw8y
- SHA256 4adcc461bc38272c3f085713dc529d65a287c860e7ef3b60f3f389742472ce1a
- MD5 22e17e22266235e641795f95ebcc7970
- SHA1 e2889981c6d0b6b0dacda69eaca5978ecfa67e03
- SHA512 56e6818c31e5e9c7e84410da40eb60af8012b33f84793073f68f8a2485e0c336bb63577e5d9b95124828bad216f930e6f9ca1a82eff30f8d43511bb825cfbdda
- SSDEEP 3072:vbuMGq4hOSOVsjsve3ijKWHu3VS8QgGySkgo5aEb5B7FqsKoUJ6UUR0E/Rc:TGq4sHVED3i7HaS8QgPSOaEbNqshUkU/
- TLSH T10AE3D1127A50C831E162257058349AF3566F766153B916CBBB9D1FBE9E302C19E3832F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_22e17e22266235e641795f95ebcc7970_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_22e17e22266235e641795f95ebcc7970_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_22e17e22266235e641795f95ebcc7970_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- SHA256 4adcc461bc38272c3f085713dc529d65a287c860e7ef3b60f3f389742472ce1a
- MD5 22e17e22266235e641795f95ebcc7970
- SHA1 e2889981c6d0b6b0dacda69eaca5978ecfa67e03
- SHA512 56e6818c31e5e9c7e84410da40eb60af8012b33f84793073f68f8a2485e0c336bb63577e5d9b95124828bad216f930e6f9ca1a82eff30f8d43511bb825cfbdda
- SSDEEP 3072:vbuMGq4hOSOVsjsve3ijKWHu3VS8QgGySkgo5aEb5B7FqsKoUJ6UUR0E/Rc:TGq4sHVED3i7HaS8QgPSOaEbNqshUkU/
- TLSH T10AE3D1127A50C831E162257058349AF3566F766153B916CBBB9D1FBE9E302C19E3832F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Executes dropped EXE
-
Suspicious use of SetThreadContext