General
- Target 2026-07-29_bab76e7a1534f90bb55b850838947477_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- Sample260729-yekhtadg86
- SHA256 65bac77074d41ad7af1095bc971ad7736fe3a0983adfc5e94f82e10d5d505713
- MD5 bab76e7a1534f90bb55b850838947477
- SHA1 3798427da30a78f0ca128f6de8db1bcbc60b8132
- SHA512 0dad9b72456581d4d030c7f5ce41c594ea279d5ad61174bdd51438789e2cf58759fe590bd8c5ed96ea5ce79deeae776ed9733711a4a0a6216360c421d6ab5e63
- SSDEEP 3072:vbuMGq4hOSOVzjsvTnoFupPbQXgSmesLiww4wIC/JzC:TGq4sHVn9EbitmjnwXdC
- TLSH T188E3E025B951D032D4925A706CB5D6B2966BBD61037C02CBB3AC1FBE5F602C19E3C36B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_bab76e7a1534f90bb55b850838947477_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_bab76e7a1534f90bb55b850838947477_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win11ltsc2024-20260710-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_bab76e7a1534f90bb55b850838947477_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- SHA256 65bac77074d41ad7af1095bc971ad7736fe3a0983adfc5e94f82e10d5d505713
- MD5 bab76e7a1534f90bb55b850838947477
- SHA1 3798427da30a78f0ca128f6de8db1bcbc60b8132
- SHA512 0dad9b72456581d4d030c7f5ce41c594ea279d5ad61174bdd51438789e2cf58759fe590bd8c5ed96ea5ce79deeae776ed9733711a4a0a6216360c421d6ab5e63
- SSDEEP 3072:vbuMGq4hOSOVzjsvTnoFupPbQXgSmesLiww4wIC/JzC:TGq4sHVn9EbitmjnwXdC
- TLSH T188E3E025B951D032D4925A706CB5D6B2966BBD61037C02CBB3AC1FBE5F602C19E3C36B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Executes dropped EXE
-
Suspicious use of SetThreadContext