General
- Target 2026-08-03_15f085dd695ddf0b05131c206cf9e538_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- Sample260804-dxd4jacc42
- SHA256 c663a206a4977756a0db42202d564b9445e1e4b00d021c90ddda5a499107c426
- MD5 15f085dd695ddf0b05131c206cf9e538
- SHA1 b0595380d82a2794050d673526a239ea21476556
- SHA512 20835b0dcb7ab44b4c6b74ce810e90e482e75ce1863b85ad0f6c8a01f12ec5be3d70d78b80839e348359cc25f32642df493f88e27372d4445ae96c430a264dce
- SSDEEP 3072:vbuMGq4hOSOVkjsvN9jubUl0FaDqJzteKTF4MNP+VXjp:TGq4sHVcUybUyFYqtte4mM4z
- TLSH T122E3E026B995C471D09225304AB5D6B3B26FB92167B805CBB7481FBE5F606C18E3C32F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_15f085dd695ddf0b05131c206cf9e538_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_15f085dd695ddf0b05131c206cf9e538_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_15f085dd695ddf0b05131c206cf9e538_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- SHA256 c663a206a4977756a0db42202d564b9445e1e4b00d021c90ddda5a499107c426
- MD5 15f085dd695ddf0b05131c206cf9e538
- SHA1 b0595380d82a2794050d673526a239ea21476556
- SHA512 20835b0dcb7ab44b4c6b74ce810e90e482e75ce1863b85ad0f6c8a01f12ec5be3d70d78b80839e348359cc25f32642df493f88e27372d4445ae96c430a264dce
- SSDEEP 3072:vbuMGq4hOSOVkjsvN9jubUl0FaDqJzteKTF4MNP+VXjp:TGq4sHVcUybUyFYqtte4mM4z
- TLSH T122E3E026B995C471D09225304AB5D6B3B26FB92167B805CBB7481FBE5F606C18E3C32F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Executes dropped EXE
-
Suspicious use of SetThreadContext