General
- Target 2026-08-03_d1d1b44832ed3f24da2cb4f14c003abd_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- Sample260803-vcfkaswsbv
- SHA256 fbf31ddc3069f97f96cc77b3b8b5ac1f13dc5283b49803e6db34419f54fa608d
- MD5 d1d1b44832ed3f24da2cb4f14c003abd
- SHA1 09f153ad81947cab6a108334e720096cfe096d21
- SHA512 ceebde3fcf46bec38fba12d976c6d61519a6ca3f33bea2cd42198a4626c99b5c0c6f145a1defb891c4e59690a77cc0b066d2f1362112fbf16b14d45a6906e547
- SSDEEP 3072:vbuMGq4hOSOV5jsvrBPG5h88F1X62K3kkjuSGbP:TGq4sHVBiBPGE8jFnSCP
- TLSH T15CE3D025B6A0D032D1A22A704C7496B3B66F75A117F905C77BA82FBD5F702C05E3836B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_d1d1b44832ed3f24da2cb4f14c003abd_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_d1d1b44832ed3f24da2cb4f14c003abd_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_d1d1b44832ed3f24da2cb4f14c003abd_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- SHA256 fbf31ddc3069f97f96cc77b3b8b5ac1f13dc5283b49803e6db34419f54fa608d
- MD5 d1d1b44832ed3f24da2cb4f14c003abd
- SHA1 09f153ad81947cab6a108334e720096cfe096d21
- SHA512 ceebde3fcf46bec38fba12d976c6d61519a6ca3f33bea2cd42198a4626c99b5c0c6f145a1defb891c4e59690a77cc0b066d2f1362112fbf16b14d45a6906e547
- SSDEEP 3072:vbuMGq4hOSOV5jsvrBPG5h88F1X62K3kkjuSGbP:TGq4sHVBiBPGE8jFnSCP
- TLSH T15CE3D025B6A0D032D1A22A704C7496B3B66F75A117F905C77BA82FBD5F702C05E3836B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Executes dropped EXE
-
Suspicious use of SetThreadContext