General
- Target 2026-07-20_4f1c7672003911b0d0a4007fc2aac372_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- Sample260720-wchv4ah18p
- SHA256 11803b0c6b5c73d5e7991d0072938db99ef858171da984c559b6d1789a71e869
- MD5 4f1c7672003911b0d0a4007fc2aac372
- SHA1 0fc4cb88ed38e386feb2c2331331f53440da97de
- SHA512 67c955d4534644e250821431f1a62ed848a56253b31a1592c6242daa66257643efdc7772e32c50b1fe3c26ae8ae17014787eb0a1317c5292c5c530887a68cf17
- SSDEEP 3072:vbuMGq4hOSOVajsvcJK8Whx35qBYaW7w0GDmDPhQ3/AH4:TGq4sHVGi8AJ5vPs0GDGPS3/AH4
- TLSH T139E3D0257690D432D06226305D70DBF6AA1FB86217B845CBB7C81FBE5E607D09E3836B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_4f1c7672003911b0d0a4007fc2aac372_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_4f1c7672003911b0d0a4007fc2aac372_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_4f1c7672003911b0d0a4007fc2aac372_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- SHA256 11803b0c6b5c73d5e7991d0072938db99ef858171da984c559b6d1789a71e869
- MD5 4f1c7672003911b0d0a4007fc2aac372
- SHA1 0fc4cb88ed38e386feb2c2331331f53440da97de
- SHA512 67c955d4534644e250821431f1a62ed848a56253b31a1592c6242daa66257643efdc7772e32c50b1fe3c26ae8ae17014787eb0a1317c5292c5c530887a68cf17
- SSDEEP 3072:vbuMGq4hOSOVajsvcJK8Whx35qBYaW7w0GDmDPhQ3/AH4:TGq4sHVGi8AJ5vPs0GDGPS3/AH4
- TLSH T139E3D0257690D432D06226305D70DBF6AA1FB86217B845CBB7C81FBE5E607D09E3836B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Executes dropped EXE
-
Suspicious use of SetThreadContext