General
- Target 2026-07-20_0d5bca36ae7c3ea2096832743d5099f2_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- Sample260720-tscmxaf12l
- SHA256 303e6c7e291f2185830fd4a69b64c44943f598d9ae13c4549125801198d47070
- MD5 0d5bca36ae7c3ea2096832743d5099f2
- SHA1 0715cab3e3e982f47af4a83915840c158b661b96
- SHA512 c816b548320f2aac77056b5b20297a6d0a09dacf6c691586ddb3b84f99fa260938a7655d24cfbc9508c66e5c8edce9c1f74872633cc3fed8e3abd5eb484de371
- SSDEEP 3072:vbuMGq4hOSOVYjsv42puJhHjKRASlZZ2QWHBoPkhnqVkonOhvc:TGq4sHV4OU7eRATQWHBoP2sOtc
- TLSH T148E3E1217991D472E16226705D71D2B7A61AB963277C42CBB3981FBD9F702C09A3832F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_0d5bca36ae7c3ea2096832743d5099f2_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_0d5bca36ae7c3ea2096832743d5099f2_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win11ltsc2024-20260710-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_0d5bca36ae7c3ea2096832743d5099f2_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- SHA256 303e6c7e291f2185830fd4a69b64c44943f598d9ae13c4549125801198d47070
- MD5 0d5bca36ae7c3ea2096832743d5099f2
- SHA1 0715cab3e3e982f47af4a83915840c158b661b96
- SHA512 c816b548320f2aac77056b5b20297a6d0a09dacf6c691586ddb3b84f99fa260938a7655d24cfbc9508c66e5c8edce9c1f74872633cc3fed8e3abd5eb484de371
- SSDEEP 3072:vbuMGq4hOSOVYjsv42puJhHjKRASlZZ2QWHBoPkhnqVkonOhvc:TGq4sHV4OU7eRATQWHBoP2sOtc
- TLSH T148E3E1217991D472E16226705D71D2B7A61AB963277C42CBB3981FBD9F702C09A3832F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Executes dropped EXE
-
Suspicious use of SetThreadContext