General
- Target 2026-07-20_bb0f18b9b36fb40396e4414526c30c33_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- Sample260720-vlsafsax51
- SHA256 dfa783e0d4748b8bd3e0c390af565fb2aaabf81dcba9b23352b6e92a773e1ed8
- MD5 bb0f18b9b36fb40396e4414526c30c33
- SHA1 a7557e210f643e656db6f04a7a17146f6a400d2c
- SHA512 79efb43710b88c78071f174ebdc8296f2fd963ae808bd79d198b7e5f188bf804a16b92fcc627dc8ad34cd666a7401cec45d129a63d432a126e341a2a912ca22b
- SSDEEP 3072:vbuMGq4hOSOVgjsv7r3wqLMn+CW6fZEJH0IDHM1Jcc:TGq4sHVg83wmMnU6fsHF7m
- TLSH T134E3D0357AA08535E06366705CB0D5B2A62B756103B845CBBBDC1BBFAF706C15E3832B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_bb0f18b9b36fb40396e4414526c30c33_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_bb0f18b9b36fb40396e4414526c30c33_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_bb0f18b9b36fb40396e4414526c30c33_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- SHA256 dfa783e0d4748b8bd3e0c390af565fb2aaabf81dcba9b23352b6e92a773e1ed8
- MD5 bb0f18b9b36fb40396e4414526c30c33
- SHA1 a7557e210f643e656db6f04a7a17146f6a400d2c
- SHA512 79efb43710b88c78071f174ebdc8296f2fd963ae808bd79d198b7e5f188bf804a16b92fcc627dc8ad34cd666a7401cec45d129a63d432a126e341a2a912ca22b
- SSDEEP 3072:vbuMGq4hOSOVgjsv7r3wqLMn+CW6fZEJH0IDHM1Jcc:TGq4sHVg83wmMnU6fsHF7m
- TLSH T134E3D0357AA08535E06366705CB0D5B2A62B756103B845CBBBDC1BBFAF706C15E3832B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Executes dropped EXE
-
Suspicious use of SetThreadContext