General
- Target 2026-08-03_d479907000f8ca9cca50d9dd985fe5c0_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- Sample260803-va6zgawsav
- SHA256 06761b4c4003f5bd65f4274bd2bba38cc55dae5e6a117b6589696cc12ffae3bd
- MD5 d479907000f8ca9cca50d9dd985fe5c0
- SHA1 044ed4e2024c58d8d1cb99b394c68d43250911ad
- SHA512 0e60c6bdd0959f5272c9319de874a6538d2e151e57c2bda0826cdfdea8e939115ecc8e99bb6d3d907a3dff6c97abc620a24b373c507206e36a83f15b7dcf61d2
- SSDEEP 3072:vbuMGq4hOSOVVjsvgLDwr46XALf7RMOsl+nrMy0wCqaZa:TGq4sHVlnfN6QTmI/BaZa
- TLSH T14DE3D02676A29932E05326B0987095B3E52F796113B846DBB75C0FBE5F302C15E3835F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_d479907000f8ca9cca50d9dd985fe5c0_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_d479907000f8ca9cca50d9dd985fe5c0_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_d479907000f8ca9cca50d9dd985fe5c0_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- SHA256 06761b4c4003f5bd65f4274bd2bba38cc55dae5e6a117b6589696cc12ffae3bd
- MD5 d479907000f8ca9cca50d9dd985fe5c0
- SHA1 044ed4e2024c58d8d1cb99b394c68d43250911ad
- SHA512 0e60c6bdd0959f5272c9319de874a6538d2e151e57c2bda0826cdfdea8e939115ecc8e99bb6d3d907a3dff6c97abc620a24b373c507206e36a83f15b7dcf61d2
- SSDEEP 3072:vbuMGq4hOSOVVjsvgLDwr46XALf7RMOsl+nrMy0wCqaZa:TGq4sHVlnfN6QTmI/BaZa
- TLSH T14DE3D02676A29932E05326B0987095B3E52F796113B846DBB75C0FBE5F302C15E3835F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Executes dropped EXE
-
Suspicious use of SetThreadContext