General
- Target 2026-08-04_8b63bcaed4633a62acb4a6111e7973fc_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- Sample260804-sfgweszzfs
- SHA256 8df0c049ae7a3461c3060a1750eb2966e4b5709065bc4133ed10b7acf1d97799
- MD5 8b63bcaed4633a62acb4a6111e7973fc
- SHA1 fe31177a096e9094fa01118cc99d1d3d9c7c2d47
- SHA512 18023e15d60ee52190daa438997ef913d4347ba81a0ee34ced6829258063d4214b2d229d016115246e50ec80758f73ad96affbf1872dc68368ba31997e1485d4
- SSDEEP 3072:vbuMGq4hOSOVgjsvl9E+02LspgXtEvJ7tvNXdvAlvNvu53tMjU:TGq4sHVgYEqLx96Jxv/UBu5dMjU
- TLSH T156E3E0157A91D472E16326704DB1E1B2AA3B7960577805CFB7981BBD4EB02C29F3832F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_8b63bcaed4633a62acb4a6111e7973fc_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_8b63bcaed4633a62acb4a6111e7973fc_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_8b63bcaed4633a62acb4a6111e7973fc_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- SHA256 8df0c049ae7a3461c3060a1750eb2966e4b5709065bc4133ed10b7acf1d97799
- MD5 8b63bcaed4633a62acb4a6111e7973fc
- SHA1 fe31177a096e9094fa01118cc99d1d3d9c7c2d47
- SHA512 18023e15d60ee52190daa438997ef913d4347ba81a0ee34ced6829258063d4214b2d229d016115246e50ec80758f73ad96affbf1872dc68368ba31997e1485d4
- SSDEEP 3072:vbuMGq4hOSOVgjsvl9E+02LspgXtEvJ7tvNXdvAlvNvu53tMjU:TGq4sHVgYEqLx96Jxv/UBu5dMjU
- TLSH T156E3E0157A91D472E16326704DB1E1B2AA3B7960577805CFB7981BBD4EB02C29F3832F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Executes dropped EXE
-
Suspicious use of SetThreadContext