General
- Target 2026-07-29_6465d4caac510ab3d7fe5ac5bf8fdb82_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- Sample260729-wbhtpscn4s
- SHA256 a45fdbdd0282e9ff671d47124ebf138655dcc00296b542d5d92dad78ebcba37f
- MD5 6465d4caac510ab3d7fe5ac5bf8fdb82
- SHA1 a95c070769a039dc231d506b01de46e7b6f196ba
- SHA512 2740d40270e961abec8cfa2e729db202a8d231c0e74fc46fc481297029aa8045093cdfb1f2bcea7e4f6a5d6dba4596e0e4e1d41524b05aad4c9239ac011bf2f6
- SSDEEP 3072:vbuMGq4hOSOV0jsvUfBFMLnJnUN7ppclH8xfzR6DQOxK:TGq4sHVsdTGnJnU5pelH8xd60YK
- TLSH T110E3E035BAA0D432E06326705CB0A6B2996B7951477C46CB77981FBE5F706C18E3831F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_6465d4caac510ab3d7fe5ac5bf8fdb82_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_6465d4caac510ab3d7fe5ac5bf8fdb82_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_6465d4caac510ab3d7fe5ac5bf8fdb82_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- SHA256 a45fdbdd0282e9ff671d47124ebf138655dcc00296b542d5d92dad78ebcba37f
- MD5 6465d4caac510ab3d7fe5ac5bf8fdb82
- SHA1 a95c070769a039dc231d506b01de46e7b6f196ba
- SHA512 2740d40270e961abec8cfa2e729db202a8d231c0e74fc46fc481297029aa8045093cdfb1f2bcea7e4f6a5d6dba4596e0e4e1d41524b05aad4c9239ac011bf2f6
- SSDEEP 3072:vbuMGq4hOSOV0jsvUfBFMLnJnUN7ppclH8xfzR6DQOxK:TGq4sHVsdTGnJnU5pelH8xd60YK
- TLSH T110E3E035BAA0D432E06326705CB0A6B2996B7951477C46CB77981FBE5F706C18E3831F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Executes dropped EXE
-
Suspicious use of SetThreadContext