General
- Target 2026-07-28_671190e7b669ea78c27be77f985add2a_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- Sample260728-xcv14abc37
- SHA256 0ee69c61364889305e0a1092e4749d4b7dfc780b331c4f3deeacc5ff9797f406
- MD5 671190e7b669ea78c27be77f985add2a
- SHA1 bdd19894f2727f8ba66b4ef453b806391358f7c2
- SHA512 ea3659d6daebcfaa7fdfec9ede60ebd44a0f3a2470cfaac4aeb4370e92771d912406523dfb28b4cef1ecc652c58389f732493fe3bbc5548f263dc298e8b95fe4
- SSDEEP 3072:vbuMGq4hOSOVAjsvKWa5kI89HRQjZsySj56ogajdtu3AokFFB:TGq4sHVA3HAH6RO56QdW7MB
- TLSH T123E3E011BA91C432E2521530987697B7B62B796117B845CBBBD81FBE2F702D05E3832F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-28_671190e7b669ea78c27be77f985add2a_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_671190e7b669ea78c27be77f985add2a_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_671190e7b669ea78c27be77f985add2a_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- SHA256 0ee69c61364889305e0a1092e4749d4b7dfc780b331c4f3deeacc5ff9797f406
- MD5 671190e7b669ea78c27be77f985add2a
- SHA1 bdd19894f2727f8ba66b4ef453b806391358f7c2
- SHA512 ea3659d6daebcfaa7fdfec9ede60ebd44a0f3a2470cfaac4aeb4370e92771d912406523dfb28b4cef1ecc652c58389f732493fe3bbc5548f263dc298e8b95fe4
- SSDEEP 3072:vbuMGq4hOSOVAjsvKWa5kI89HRQjZsySj56ogajdtu3AokFFB:TGq4sHVA3HAH6RO56QdW7MB
- TLSH T123E3E011BA91C432E2521530987697B7B62B796117B845CBBBD81FBE2F702D05E3832F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Executes dropped EXE
-
Suspicious use of SetThreadContext