General
- Target 2026-08-03_dc776a4e22ce164e9c51d464230fb0af_amadey_elex_rhadamanthys_smoke-loader_stop
- Size 368KB
- Sample260804-lbvs6astc1
- SHA256 85875ac9b55d6c7a5cbe2c404a14e7e786a1e53af542abef49e5efc075aa4854
- MD5 dc776a4e22ce164e9c51d464230fb0af
- SHA1 b53dfc852a6ade20da5e1878c3fa8b2de9e6cfaf
- SHA512 7d724657f8dc665b7f9e80725c47f197fb835ff5be5be355538da0413cd067ddd9a18e36aa7e76c31423127638213e623840aeba8f81507966993b0564bd46d3
- SSDEEP 6144:sFxbrqwifQDmSAmTTIJ9YY10Abb/Sr2Txj72zltNla40Oq:sj3HprNTTA1dbDRXQQ
- TLSH T14784D02636D2C936E11AC87D0C05D49D561EBC842FBA2BE377D87F8B4A732C74A35681
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_dc776a4e22ce164e9c51d464230fb0af_amadey_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_dc776a4e22ce164e9c51d464230fb0af_amadey_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_dc776a4e22ce164e9c51d464230fb0af_amadey_elex_rhadamanthys_smoke-loader_stop
- Size 368KB
- SHA256 85875ac9b55d6c7a5cbe2c404a14e7e786a1e53af542abef49e5efc075aa4854
- MD5 dc776a4e22ce164e9c51d464230fb0af
- SHA1 b53dfc852a6ade20da5e1878c3fa8b2de9e6cfaf
- SHA512 7d724657f8dc665b7f9e80725c47f197fb835ff5be5be355538da0413cd067ddd9a18e36aa7e76c31423127638213e623840aeba8f81507966993b0564bd46d3
- SSDEEP 6144:sFxbrqwifQDmSAmTTIJ9YY10Abb/Sr2Txj72zltNla40Oq:sj3HprNTTA1dbDRXQQ
- TLSH T14784D02636D2C936E11AC87D0C05D49D561EBC842FBA2BE377D87F8B4A732C74A35681
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with aPLib.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Adds Run key to start application
-
Checks for any installed AV software in registry
-
Suspicious use of SetThreadContext
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1