General
- Target 2026-07-29_baf587f648c530050357f5e715d8846f_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- Sample260729-vmvrzabh32
- SHA256 13d7bac799bf97af2a7d5502fbad04ba3e0c329a6603960bfad939f2ae7d55fa
- MD5 baf587f648c530050357f5e715d8846f
- SHA1 44c54df65243f8f68a825a44ba8ae1900553b48f
- SHA512 bac5e2835abb252159cc096bbb43669ee4b8ee7adb057c55ea6dc22797cf91722d31b33931b00f8f5c4105361d26348266351c469f3cd83561822cdb436b6e34
- SSDEEP 3072:vbuMGq4hOSOVKjsvcOdizOiBWRJOM5t5WeSR0CRgw8ou5p:TGq4sHV2/VzOiBev5EHMp
- TLSH T1C4E3D026BA51C472D5832630487192B2B62F756227B842CF77981BBE9F702C15F7C36E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_baf587f648c530050357f5e715d8846f_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_baf587f648c530050357f5e715d8846f_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_baf587f648c530050357f5e715d8846f_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- SHA256 13d7bac799bf97af2a7d5502fbad04ba3e0c329a6603960bfad939f2ae7d55fa
- MD5 baf587f648c530050357f5e715d8846f
- SHA1 44c54df65243f8f68a825a44ba8ae1900553b48f
- SHA512 bac5e2835abb252159cc096bbb43669ee4b8ee7adb057c55ea6dc22797cf91722d31b33931b00f8f5c4105361d26348266351c469f3cd83561822cdb436b6e34
- SSDEEP 3072:vbuMGq4hOSOVKjsvcOdizOiBWRJOM5t5WeSR0CRgw8ou5p:TGq4sHV2/VzOiBev5EHMp
- TLSH T1C4E3D026BA51C472D5832630487192B2B62F756227B842CF77981BBE9F702C15F7C36E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Executes dropped EXE
-
Suspicious use of SetThreadContext