General
- Target 2026-07-29_1ed87f0e1676d683c8b1f1ba9acb422d_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- Sample260729-nedp6afj2t
- SHA256 b4194e3609336ab39687202d6aba05101c619753c34b771cd67956a0323fc2f8
- MD5 1ed87f0e1676d683c8b1f1ba9acb422d
- SHA1 ce2980492b2b76416cbb602e75ccfe22db73d540
- SHA512 e6b1373627397bd100b0f87f273dd0a647847dd054f899ec88efca4e670b815a739eb00ab9e3aefd6dce73b38aacf201f327844f6389f5b44b4a506cb2a24a28
- SSDEEP 3072:vbuMGq4hOSOVIjsvJAvIkQ9FdaWIQr9w5HFUOyLqt:TGq4sHVoFQcW5Uiqt
- TLSH T1B8E3D0247A618832D46222304D7092F3E56F7962177942CBBB981FBE9F706C19B3C71B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_1ed87f0e1676d683c8b1f1ba9acb422d_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_1ed87f0e1676d683c8b1f1ba9acb422d_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_1ed87f0e1676d683c8b1f1ba9acb422d_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- SHA256 b4194e3609336ab39687202d6aba05101c619753c34b771cd67956a0323fc2f8
- MD5 1ed87f0e1676d683c8b1f1ba9acb422d
- SHA1 ce2980492b2b76416cbb602e75ccfe22db73d540
- SHA512 e6b1373627397bd100b0f87f273dd0a647847dd054f899ec88efca4e670b815a739eb00ab9e3aefd6dce73b38aacf201f327844f6389f5b44b4a506cb2a24a28
- SSDEEP 3072:vbuMGq4hOSOVIjsvJAvIkQ9FdaWIQr9w5HFUOyLqt:TGq4sHVoFQcW5Uiqt
- TLSH T1B8E3D0247A618832D46222304D7092F3E56F7962177942CBBB981FBE9F706C19B3C71B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Executes dropped EXE
-
Suspicious use of SetThreadContext