General
- Target 2026-07-31_38a43ee033b7ff01f2bdb4e318a1588e_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- Sample260731-xb48dayflg
- SHA256 1a96a4c3c11fb097ed8701ee56f66e623048296264c4e81a97e8d4db99e6b376
- MD5 38a43ee033b7ff01f2bdb4e318a1588e
- SHA1 b43c84fcc96eff923cfab32299d8c4a976641dfe
- SHA512 84de2c3765a4373e661d33cc2019ca0c7870d58df9f5ae124eed53cf5e9a998b5b5fc023bb28135ed524923ac0769774c164073396e82a19c9bf3ab11a997190
- SSDEEP 3072:vbuMGq4hOSOV9jsvQdwguP3ESKjqWH62txDS8ki+:TGq4sHVNJzS616IK
- TLSH T1F1E3E125B991C432E15326705875D2B6A61B786217B806DB7B8C1F7E9F703C19E3C32B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_38a43ee033b7ff01f2bdb4e318a1588e_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_38a43ee033b7ff01f2bdb4e318a1588e_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_38a43ee033b7ff01f2bdb4e318a1588e_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- SHA256 1a96a4c3c11fb097ed8701ee56f66e623048296264c4e81a97e8d4db99e6b376
- MD5 38a43ee033b7ff01f2bdb4e318a1588e
- SHA1 b43c84fcc96eff923cfab32299d8c4a976641dfe
- SHA512 84de2c3765a4373e661d33cc2019ca0c7870d58df9f5ae124eed53cf5e9a998b5b5fc023bb28135ed524923ac0769774c164073396e82a19c9bf3ab11a997190
- SSDEEP 3072:vbuMGq4hOSOV9jsvQdwguP3ESKjqWH62txDS8ki+:TGq4sHVNJzS616IK
- TLSH T1F1E3E125B991C432E15326705875D2B6A61B786217B806DB7B8C1F7E9F703C19E3C32B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Executes dropped EXE
-
Suspicious use of SetThreadContext