General
- Target 2026-07-21_b7dc4c7cf02c643ebde8e32148632939_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- Sample260721-bk994abs2j
- SHA256 278184199fee2b07d63eb3144d846fe4ec863190134b2a6d30d82cb9c82519b2
- MD5 b7dc4c7cf02c643ebde8e32148632939
- SHA1 c5e7ebc7b184696cbfb9c6f4685906a44b20f122
- SHA512 8af53f66ccdc8c08c01f1cb0c92adb5cf501606fc45edd1a047338149c0e72e3184673b5e62ebb1b3ccf7a484a9b676266127113ad4899ab3fa4329564e59d01
- SSDEEP 3072:vbuMGq4hOSOV0jsvHz77dHLbD98C2iilwLn4RCoJzcsr32V+1:TGq4sHVsa5vD9mwLn4IoNfrGg1
- TLSH T11CE3D011BA90D572E06226305C7192F2A16BB96117B942CBB3D81FBE5E703C09E3D76F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-21_b7dc4c7cf02c643ebde8e32148632939_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-21_b7dc4c7cf02c643ebde8e32148632939_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-21_b7dc4c7cf02c643ebde8e32148632939_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- SHA256 278184199fee2b07d63eb3144d846fe4ec863190134b2a6d30d82cb9c82519b2
- MD5 b7dc4c7cf02c643ebde8e32148632939
- SHA1 c5e7ebc7b184696cbfb9c6f4685906a44b20f122
- SHA512 8af53f66ccdc8c08c01f1cb0c92adb5cf501606fc45edd1a047338149c0e72e3184673b5e62ebb1b3ccf7a484a9b676266127113ad4899ab3fa4329564e59d01
- SSDEEP 3072:vbuMGq4hOSOV0jsvHz77dHLbD98C2iilwLn4RCoJzcsr32V+1:TGq4sHVsa5vD9mwLn4IoNfrGg1
- TLSH T11CE3D011BA90D572E06226305C7192F2A16BB96117B942CBB3D81FBE5E703C09E3D76F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Executes dropped EXE
-
Suspicious use of SetThreadContext