General
- Target 2026-07-29_ac86e8ba58855ef39861b189d2eef6d2_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- Sample260729-vr2fbaca23
- SHA256 c78d1e6151e90c4d183785fb9e4539dd464a3b92659c49aad2d3b8b818cb45e1
- MD5 ac86e8ba58855ef39861b189d2eef6d2
- SHA1 f750f434a10f45b34c0a5d1a2f3e1f73d3651570
- SHA512 220249f99d8c62a70441341585372dafc93638012eeb7f9dfb9181c8aa7c6b510f535efe375d3589f3d87500648ada0cacb459688a4b16a32693a0a75dbd8592
- SSDEEP 3072:vbuMGq4hOSOV4jsvBgWD/uzj8jYRtsRLo5LVA5R0Rekou3bA9t9f7Yt:TGq4sHVYa3sAjQtslEVA5R07PGPf7Yt
- TLSH T1B4E3D036B6A18432E19325305870D6B3E66BB421577805DBB7981FFE1FA06C19F3932B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_ac86e8ba58855ef39861b189d2eef6d2_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_ac86e8ba58855ef39861b189d2eef6d2_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_ac86e8ba58855ef39861b189d2eef6d2_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- SHA256 c78d1e6151e90c4d183785fb9e4539dd464a3b92659c49aad2d3b8b818cb45e1
- MD5 ac86e8ba58855ef39861b189d2eef6d2
- SHA1 f750f434a10f45b34c0a5d1a2f3e1f73d3651570
- SHA512 220249f99d8c62a70441341585372dafc93638012eeb7f9dfb9181c8aa7c6b510f535efe375d3589f3d87500648ada0cacb459688a4b16a32693a0a75dbd8592
- SSDEEP 3072:vbuMGq4hOSOV4jsvBgWD/uzj8jYRtsRLo5LVA5R0Rekou3bA9t9f7Yt:TGq4sHVYa3sAjQtslEVA5R07PGPf7Yt
- TLSH T1B4E3D036B6A18432E19325305870D6B3E66BB421577805DBB7981FFE1FA06C19F3932B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Executes dropped EXE
-
Suspicious use of SetThreadContext