General
- Target 2026-07-31_3852a24f0b8a4bcdc7d2bea11197edcc_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- Sample260731-xcbbpayfna
- SHA256 2da8f84f1e3d22db90b13ddc21c87f3e5312678ae2477158ed3c44bef1933717
- MD5 3852a24f0b8a4bcdc7d2bea11197edcc
- SHA1 dba88cd4dc4cfca63fe337bef37dd228dabdafd3
- SHA512 65e4e48b4475c43b73a237f03352d0e236c67961ae372387117cbcf3337270eb157a37285fa2d697ab6679a35ed3d90896e36cac7bb74ef7b2aaea6c72c11f6c
- SSDEEP 3072:vbuMGq4hOSOVTjsvGT+FVksDnNMwk6SHKLT5gM7JvKPcZ:TGq4sHVHt+FfNMwpSqX5gasPI
- TLSH T1C9E3E111B691D476D1A3263049B1A6B3B62F7961177841CBB7C82FBE6E602C09E3C71F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_3852a24f0b8a4bcdc7d2bea11197edcc_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_3852a24f0b8a4bcdc7d2bea11197edcc_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_3852a24f0b8a4bcdc7d2bea11197edcc_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- SHA256 2da8f84f1e3d22db90b13ddc21c87f3e5312678ae2477158ed3c44bef1933717
- MD5 3852a24f0b8a4bcdc7d2bea11197edcc
- SHA1 dba88cd4dc4cfca63fe337bef37dd228dabdafd3
- SHA512 65e4e48b4475c43b73a237f03352d0e236c67961ae372387117cbcf3337270eb157a37285fa2d697ab6679a35ed3d90896e36cac7bb74ef7b2aaea6c72c11f6c
- SSDEEP 3072:vbuMGq4hOSOVTjsvGT+FVksDnNMwk6SHKLT5gM7JvKPcZ:TGq4sHVHt+FfNMwpSqX5gasPI
- TLSH T1C9E3E111B691D476D1A3263049B1A6B3B62F7961177841CBB7C82FBE6E602C09E3C71F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Executes dropped EXE
-
Suspicious use of SetThreadContext