General
- Target 2026-08-04_f915cd79cf9ff6879f988a06a44e5dde_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- Sample260804-vz9rnaec88
- SHA256 8d498052c9357a1d9acb4092980612e19f1fd18b3a0b0332aeaedd6106a2a449
- MD5 f915cd79cf9ff6879f988a06a44e5dde
- SHA1 0eec47286ed95542948534fd51e4614927ca66ae
- SHA512 8b15aad1de853a20a4aaca85c4bc7a5669ebd038b527d9633a1ab17d6f6ae6664f7ea855fc38e5608f036f3a9bf0dd9c105b00dce572fffa2632c2382cb98570
- SSDEEP 3072:vbuMGq4hOSOV9jsvNyTqg4+WTJ4Qga1cwJreI4YcZK7Rycibu:TGq4sHVNvTq/+WTJfJKIR7Ryci6
- TLSH T153E3E128BA919472E29316708CB1D6F2E27B7861137801CBB7991B7D5F606C09E3877F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_f915cd79cf9ff6879f988a06a44e5dde_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_f915cd79cf9ff6879f988a06a44e5dde_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_f915cd79cf9ff6879f988a06a44e5dde_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- SHA256 8d498052c9357a1d9acb4092980612e19f1fd18b3a0b0332aeaedd6106a2a449
- MD5 f915cd79cf9ff6879f988a06a44e5dde
- SHA1 0eec47286ed95542948534fd51e4614927ca66ae
- SHA512 8b15aad1de853a20a4aaca85c4bc7a5669ebd038b527d9633a1ab17d6f6ae6664f7ea855fc38e5608f036f3a9bf0dd9c105b00dce572fffa2632c2382cb98570
- SSDEEP 3072:vbuMGq4hOSOV9jsvNyTqg4+WTJ4Qga1cwJreI4YcZK7Rycibu:TGq4sHVNvTq/+WTJfJKIR7Ryci6
- TLSH T153E3E128BA919472E29316708CB1D6F2E27B7861137801CBB7991B7D5F606C09E3877F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Executes dropped EXE
-
Suspicious use of SetThreadContext