General
- Target 2026-08-03_ff1972b1e4942bb4a767b9c1706a1036_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- Sample260803-tthkjsca87
- SHA256 523c84fe93819d765bfa8366d57a571320aa110060723f9a848034ab38251c68
- MD5 ff1972b1e4942bb4a767b9c1706a1036
- SHA1 5868d78166b034a0d11dab2f6e8fe2cdb1ae68f3
- SHA512 5e4baa3a9cf0292a52c2448a3ebf58aae4d6b434ebd6a4afab34e16e3a098a29dcdecb82d6fb0da748baacf6d8862961e7b488e6d572015834cb2884fbde5071
- SSDEEP 3072:vbuMGq4hOSOVUjsvZ90uvKk9gNyFzT7cPtpfG7IUjbGOu8p:TGq4sHVMnU9gE9cfOUWbGGp
- TLSH T117E3E0267A91D872E09329314DB1C5B7A52A795223BC41CF77D81BBE8E612C14F3836F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_ff1972b1e4942bb4a767b9c1706a1036_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_ff1972b1e4942bb4a767b9c1706a1036_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_ff1972b1e4942bb4a767b9c1706a1036_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- SHA256 523c84fe93819d765bfa8366d57a571320aa110060723f9a848034ab38251c68
- MD5 ff1972b1e4942bb4a767b9c1706a1036
- SHA1 5868d78166b034a0d11dab2f6e8fe2cdb1ae68f3
- SHA512 5e4baa3a9cf0292a52c2448a3ebf58aae4d6b434ebd6a4afab34e16e3a098a29dcdecb82d6fb0da748baacf6d8862961e7b488e6d572015834cb2884fbde5071
- SSDEEP 3072:vbuMGq4hOSOVUjsvZ90uvKk9gNyFzT7cPtpfG7IUjbGOu8p:TGq4sHVMnU9gE9cfOUWbGGp
- TLSH T117E3E0267A91D872E09329314DB1C5B7A52A795223BC41CF77D81BBE8E612C14F3836F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Executes dropped EXE
-
Suspicious use of SetThreadContext