General
- Target 2026-08-04_5238f6822814af276510908cfdebc2de_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- Sample260804-y12zzsyfpg
- SHA256 ab761b89df8c80f8b73ee38923717073f91c1d5c042ce76475afe2d13d3467bc
- MD5 5238f6822814af276510908cfdebc2de
- SHA1 73e3e7309baad9ad208309377ff093c03c0684eb
- SHA512 c04297d19ee9fb7b4d296265438b001d30323b10ef0ad88a22e4427e72155410a1fac9cfecfe7f4ce24ddbbc229306a3d884f72dbfd04168ef88b5a2ce02e2f0
- SSDEEP 3072:vbuMGq4hOSOVnHjsvLQRvIf6Isp26/Z1IWHPetA1HuyJXfcTvc4:TGq4sHVDxRQfvsl/oYPetMHnfcT5
- TLSH T152E3D0263A90D472E16326304DB4D6F2A52F756107B845CBBB580EBE6FB06C25F3931B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_5238f6822814af276510908cfdebc2de_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_5238f6822814af276510908cfdebc2de_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_5238f6822814af276510908cfdebc2de_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- SHA256 ab761b89df8c80f8b73ee38923717073f91c1d5c042ce76475afe2d13d3467bc
- MD5 5238f6822814af276510908cfdebc2de
- SHA1 73e3e7309baad9ad208309377ff093c03c0684eb
- SHA512 c04297d19ee9fb7b4d296265438b001d30323b10ef0ad88a22e4427e72155410a1fac9cfecfe7f4ce24ddbbc229306a3d884f72dbfd04168ef88b5a2ce02e2f0
- SSDEEP 3072:vbuMGq4hOSOVnHjsvLQRvIf6Isp26/Z1IWHPetA1HuyJXfcTvc4:TGq4sHVDxRQfvsl/oYPetMHnfcT5
- TLSH T152E3D0263A90D472E16326304DB4D6F2A52F756107B845CBBB580EBE6FB06C25F3931B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Executes dropped EXE
-
Suspicious use of SetThreadContext