General
- Target 2026-07-23_e026f1d655214e04453d26d7f4eb510c_elex_magniber_rhadamanthys_smoke-loader_stop_tofsee
- Size 208KB
- Sample260723-3scscadj9y
- SHA256 2206b12629d8a7a9d4a17c494fcd2665a7576fcb97799c46ed7515db6effdfc4
- MD5 e026f1d655214e04453d26d7f4eb510c
- SHA1 c4aa038a75b4230c2bc9738934035d169fc3e42e
- SHA512 c5388b80227ebcf44e32252d3df3238b6994d7069522e6bb6e3a7e01387dddebe63ad50277d94e8a680ff7b5f201fc629d1eb2eadd25d0e6832cc06ec331f383
- SSDEEP 3072:JqEo7L4ueEp6Bxf3IbgFPJipLgaJ5R56AtCw9THbmQ6h6pxMJJgZOiUZBqZSy:IEaLjp6Bybjb5+AhHbmpJJyp
- TLSH T110247C1830D0C076D01715BA86A0D6B1AA5F7CA94F7299CB6BD63AF84F3D3E1A72530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_e026f1d655214e04453d26d7f4eb510c_elex_magniber_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_e026f1d655214e04453d26d7f4eb510c_elex_magniber_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_e026f1d655214e04453d26d7f4eb510c_elex_magniber_rhadamanthys_smoke-loader_stop_tofsee
- Size 208KB
- SHA256 2206b12629d8a7a9d4a17c494fcd2665a7576fcb97799c46ed7515db6effdfc4
- MD5 e026f1d655214e04453d26d7f4eb510c
- SHA1 c4aa038a75b4230c2bc9738934035d169fc3e42e
- SHA512 c5388b80227ebcf44e32252d3df3238b6994d7069522e6bb6e3a7e01387dddebe63ad50277d94e8a680ff7b5f201fc629d1eb2eadd25d0e6832cc06ec331f383
- SSDEEP 3072:JqEo7L4ueEp6Bxf3IbgFPJipLgaJ5R56AtCw9THbmQ6h6pxMJJgZOiUZBqZSy:IEaLjp6Bybjb5+AhHbmpJJyp
- TLSH T110247C1830D0C076D01715BA86A0D6B1AA5F7CA94F7299CB6BD63AF84F3D3E1A72530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Suspicious use of SetThreadContext