General
- Target 2026-08-01_c40085123efd0fe2861e47518c88512b_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- Sample260801-tbxazssvht
- SHA256 9d4776876bdcabb7682025c04c91b9087a6b57b7b6a1f3bd35ef8e3259a2d43d
- MD5 c40085123efd0fe2861e47518c88512b
- SHA1 6e0743a67c3f1136f1b086939b06501f78b931df
- SHA512 7a1936296261c792b3513a864a8b8d115f4f5b3658abe19fc89c6b78b9ef60d76f5e72f81df0121d3edce2c2be8167cc787223a6b929d99acbbf5a3732b0e9eb
- SSDEEP 3072:vbuMGq4hOSOVpjsvA2hxF5JMq1BLNon5S5m+uecVHnalxJEXTTs9DY5YJF8t:TGq4sHVxZsxT5zNo5ITxJEXT/gF8t
- TLSH T148E3E0257A908872E15364300975C6B3B66F7A92277C41CB77981FBF6F702C09A3936B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_c40085123efd0fe2861e47518c88512b_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_c40085123efd0fe2861e47518c88512b_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_c40085123efd0fe2861e47518c88512b_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- SHA256 9d4776876bdcabb7682025c04c91b9087a6b57b7b6a1f3bd35ef8e3259a2d43d
- MD5 c40085123efd0fe2861e47518c88512b
- SHA1 6e0743a67c3f1136f1b086939b06501f78b931df
- SHA512 7a1936296261c792b3513a864a8b8d115f4f5b3658abe19fc89c6b78b9ef60d76f5e72f81df0121d3edce2c2be8167cc787223a6b929d99acbbf5a3732b0e9eb
- SSDEEP 3072:vbuMGq4hOSOVpjsvA2hxF5JMq1BLNon5S5m+uecVHnalxJEXTTs9DY5YJF8t:TGq4sHVxZsxT5zNo5ITxJEXT/gF8t
- TLSH T148E3E0257A908872E15364300975C6B3B66F7A92277C41CB77981FBF6F702C09A3936B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Executes dropped EXE
-
Suspicious use of SetThreadContext