General
- Target 2026-07-31_765c461116ced371b6bb5fadc299fba2_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- Sample260731-wf3dxaxfkh
- SHA256 60843ea75a586bf8b7386567e6c1500ebed22bf4ba9bc9d7463d7bb0022035ee
- MD5 765c461116ced371b6bb5fadc299fba2
- SHA1 37e5a377dfc10b50de336852a03fca72057468c3
- SHA512 45d29d580ec3ca457249079b3880a02b7916cb5adec94cea5268ab80224379d5004d63660caba9841f1b371491fd4d51441cb94f1d8b5a949cd5913fb7ddcc80
- SSDEEP 3072:vbuMGq4hOSOV/jsvZ1cPzUsB6Z+B445FzrZPNmKkqSInUCEhMlvBv5i:TGq4sHVbHzUsB++Bh5NNNmKkq1nUCEhD
- TLSH T111E3E0257A60C975E05326305874D6B3A66B796013B901CFB7A81FBE6FB06C14E3836F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_765c461116ced371b6bb5fadc299fba2_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_765c461116ced371b6bb5fadc299fba2_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_765c461116ced371b6bb5fadc299fba2_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- SHA256 60843ea75a586bf8b7386567e6c1500ebed22bf4ba9bc9d7463d7bb0022035ee
- MD5 765c461116ced371b6bb5fadc299fba2
- SHA1 37e5a377dfc10b50de336852a03fca72057468c3
- SHA512 45d29d580ec3ca457249079b3880a02b7916cb5adec94cea5268ab80224379d5004d63660caba9841f1b371491fd4d51441cb94f1d8b5a949cd5913fb7ddcc80
- SSDEEP 3072:vbuMGq4hOSOV/jsvZ1cPzUsB6Z+B445FzrZPNmKkqSInUCEhMlvBv5i:TGq4sHVbHzUsB++Bh5NNNmKkq1nUCEhD
- TLSH T111E3E0257A60C975E05326305874D6B3A66B796013B901CFB7A81FBE6FB06C14E3836F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Executes dropped EXE
-
Suspicious use of SetThreadContext