General
- Target 2026-08-03_326abc6c45badea779855ca878698c5f_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- Sample260803-dbtxvsbk51
- SHA256 8520dbf265826ccc21391fdbbb983090be7b49c3b7618aa178b1077cbc11275f
- MD5 326abc6c45badea779855ca878698c5f
- SHA1 6f292cfc7844a7b0934928fd7ccc7fab18cd423b
- SHA512 a38089c1e3c0b074fb4a598aea820f4bdb1d4c26004042eb2f2d223a497823c11750176e3301395d65bd4a3dacb2624204cc9ba87edc2ffa33fdfe3bf175ea28
- SSDEEP 3072:vbuMGq4hOSOVljsvFAYI3CnDVQDW7KmmFMnuM+eNqPH:TGq4sHV1N2Qi7KmAMuzb
- TLSH T1C8E3E1257A919472E49226309870D3B3B62B752217B844CBBB581FBE6F706C19E3C71F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_326abc6c45badea779855ca878698c5f_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_326abc6c45badea779855ca878698c5f_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win11ltsc2024-20260710-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_326abc6c45badea779855ca878698c5f_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- SHA256 8520dbf265826ccc21391fdbbb983090be7b49c3b7618aa178b1077cbc11275f
- MD5 326abc6c45badea779855ca878698c5f
- SHA1 6f292cfc7844a7b0934928fd7ccc7fab18cd423b
- SHA512 a38089c1e3c0b074fb4a598aea820f4bdb1d4c26004042eb2f2d223a497823c11750176e3301395d65bd4a3dacb2624204cc9ba87edc2ffa33fdfe3bf175ea28
- SSDEEP 3072:vbuMGq4hOSOVljsvFAYI3CnDVQDW7KmmFMnuM+eNqPH:TGq4sHV1N2Qi7KmAMuzb
- TLSH T1C8E3E1257A919472E49226309870D3B3B62B752217B844CBBB581FBE6F706C19E3C71F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Executes dropped EXE
-
Suspicious use of SetThreadContext