General
- Target 2026-08-03_718b010ace27f386b0786a7cf3eb3e6a_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- Sample260803-werwsaxtew
- SHA256 87bc20c6d08117c42804bfdf9e016f00076ea8e7b6bf4978f1fab3be4c4c27a2
- MD5 718b010ace27f386b0786a7cf3eb3e6a
- SHA1 71e5a089b8b93231cf118168da16155398a334fd
- SHA512 ce706a3f8e83119e78d3ecfa7618c94a7f34e78f0a72a99106817229c7aa5384ddc817e53f3fa0a283a4ea6b2e07c3948d1c2721ca0dac2515575c5ada42951f
- SSDEEP 3072:vbuMGq4hOSOVnjsv0XPcSRtHp1aEp8+WqstocQ1+:TGq4sHVjtRtHn5phc7z
- TLSH T11AE3D0257A52D872E2621670187496F2A66F7970137841CB77A90BFE2F706C18E3D32B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_718b010ace27f386b0786a7cf3eb3e6a_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_718b010ace27f386b0786a7cf3eb3e6a_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_718b010ace27f386b0786a7cf3eb3e6a_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- SHA256 87bc20c6d08117c42804bfdf9e016f00076ea8e7b6bf4978f1fab3be4c4c27a2
- MD5 718b010ace27f386b0786a7cf3eb3e6a
- SHA1 71e5a089b8b93231cf118168da16155398a334fd
- SHA512 ce706a3f8e83119e78d3ecfa7618c94a7f34e78f0a72a99106817229c7aa5384ddc817e53f3fa0a283a4ea6b2e07c3948d1c2721ca0dac2515575c5ada42951f
- SSDEEP 3072:vbuMGq4hOSOVnjsv0XPcSRtHp1aEp8+WqstocQ1+:TGq4sHVjtRtHn5phc7z
- TLSH T11AE3D0257A52D872E2621670187496F2A66F7970137841CB77A90BFE2F706C18E3D32B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Executes dropped EXE
-
Suspicious use of SetThreadContext