General
- Target 2026-08-03_e9fbd2543c7abc6d9f9e8924734bcde5_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- Sample260803-t3v71avyhy
- SHA256 8a868c2c689e15172e989c57526650350b30a8815fc0c24db5b2fff8094e6072
- MD5 e9fbd2543c7abc6d9f9e8924734bcde5
- SHA1 fe19c9b3976e286d42e1e1fc3baf54e91298dd7a
- SHA512 5797e66de4e00373d5458391c01981272160fdc16f5a44c8fa83db79cebeaaf25d182b26fe8dc983b79588f73263f33dd42edbb41a5898425abd0f3bd62898d2
- SSDEEP 3072:vbuMGq4hOSOVFjsvPUzgL6y1dF0PPLE3FRRvsEN6g9K:TGq4sHVVVgf1dF0XLE3ThRK
- TLSH T159E3E124B691D471D05326305C70E2B2AA6BB56217B842DB77A81FBE9F702C05E3C32F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_e9fbd2543c7abc6d9f9e8924734bcde5_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_e9fbd2543c7abc6d9f9e8924734bcde5_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_e9fbd2543c7abc6d9f9e8924734bcde5_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- SHA256 8a868c2c689e15172e989c57526650350b30a8815fc0c24db5b2fff8094e6072
- MD5 e9fbd2543c7abc6d9f9e8924734bcde5
- SHA1 fe19c9b3976e286d42e1e1fc3baf54e91298dd7a
- SHA512 5797e66de4e00373d5458391c01981272160fdc16f5a44c8fa83db79cebeaaf25d182b26fe8dc983b79588f73263f33dd42edbb41a5898425abd0f3bd62898d2
- SSDEEP 3072:vbuMGq4hOSOVFjsvPUzgL6y1dF0PPLE3FRRvsEN6g9K:TGq4sHVVVgf1dF0XLE3ThRK
- TLSH T159E3E124B691D471D05326305C70E2B2AA6BB56217B842DB77A81FBE9F702C05E3C32F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Executes dropped EXE
-
Suspicious use of SetThreadContext