General
- Target 2026-07-31_a517973d2b4716845b96b1ce093240f4_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- Sample260731-vsf6rsyth1
- SHA256 df88cdc8acf96f6bed6c9d126773210ffc7c6eb2895154be770c00898a509017
- MD5 a517973d2b4716845b96b1ce093240f4
- SHA1 e8e925bbbbe3f89692f57b4acd04ba21cc62411a
- SHA512 9e0866aa80a651d9a322d02eed136d2dfd860af453338ed5fca70f0884725adbf059dfbdc48a85fba375da30acb30d38128a6ccfa4663e589bfabc8684e03977
- SSDEEP 3072:vbuMGq4hOSOVtjsvyxLw+WpeZLwOJ8Kat/6rNgl:TGq4sHV9z5XYiJ8au
- TLSH T1B7E3E0167250D471D162267058B4E2B2AA3B7862537C42CF776C1F7E6EB02D08E3876F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_a517973d2b4716845b96b1ce093240f4_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_a517973d2b4716845b96b1ce093240f4_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_a517973d2b4716845b96b1ce093240f4_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- SHA256 df88cdc8acf96f6bed6c9d126773210ffc7c6eb2895154be770c00898a509017
- MD5 a517973d2b4716845b96b1ce093240f4
- SHA1 e8e925bbbbe3f89692f57b4acd04ba21cc62411a
- SHA512 9e0866aa80a651d9a322d02eed136d2dfd860af453338ed5fca70f0884725adbf059dfbdc48a85fba375da30acb30d38128a6ccfa4663e589bfabc8684e03977
- SSDEEP 3072:vbuMGq4hOSOVtjsvyxLw+WpeZLwOJ8Kat/6rNgl:TGq4sHV9z5XYiJ8au
- TLSH T1B7E3E0167250D471D162267058B4E2B2AA3B7862537C42CF776C1F7E6EB02D08E3876F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Executes dropped EXE
-
Suspicious use of SetThreadContext