General
- Target 2026-07-29_2785af09206641037770cbf6ec0df464_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- Sample260729-zzd27ssfqb
- SHA256 3869769e6dd43373a36e876854ca26df0710aa997379fc93a9857f6a20ebfb95
- MD5 2785af09206641037770cbf6ec0df464
- SHA1 230db22e25d5b04f7e33c37036f42eefca5a2078
- SHA512 a26c829919218ee2d17c401c936461eedd25be2cecce8caa11c18537ba6d02602b9350c3b7b30c1ca65336eafa77738b929912d0b31cd90fdd7a5c1092d07c35
- SSDEEP 3072:vbuMGq4hOSOVejsvuwIqJLDSEobgk1I2qTIC7vIwyWeMeJT:TGq4sHVCx3qJLeEobxuVICLIBMaT
- TLSH T1C9E3E021BA50C472D19229708CB1A1B3A66B766213B806CBB79C1FBD6F706C15E3935F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_2785af09206641037770cbf6ec0df464_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_2785af09206641037770cbf6ec0df464_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_2785af09206641037770cbf6ec0df464_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- SHA256 3869769e6dd43373a36e876854ca26df0710aa997379fc93a9857f6a20ebfb95
- MD5 2785af09206641037770cbf6ec0df464
- SHA1 230db22e25d5b04f7e33c37036f42eefca5a2078
- SHA512 a26c829919218ee2d17c401c936461eedd25be2cecce8caa11c18537ba6d02602b9350c3b7b30c1ca65336eafa77738b929912d0b31cd90fdd7a5c1092d07c35
- SSDEEP 3072:vbuMGq4hOSOVejsvuwIqJLDSEobgk1I2qTIC7vIwyWeMeJT:TGq4sHVCx3qJLeEobxuVICLIBMaT
- TLSH T1C9E3E021BA50C472D19229708CB1A1B3A66B766213B806CBB79C1FBD6F706C15E3935F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Executes dropped EXE
-
Suspicious use of SetThreadContext