General
- Target 2026-08-04_3b78dd119bb36df4198d9549e83f7432_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- Sample260804-zctt5sgf22
- SHA256 bb088d52ed6e9b429b7f8ce79f72d3bef753bab736b4c47149e4a096599bad85
- MD5 3b78dd119bb36df4198d9549e83f7432
- SHA1 ee9a6ee7831b3324ae9f5f414e788ef8dc16b025
- SHA512 82a2eb3f85780a605ad6c88d3f31102cc0ea549cbc48d03a8727c75837397de9d5c59e6fc10d9c3ee668ccbb5f3815d4e53962572782646135a4f6e1d46c1e83
- SSDEEP 3072:vbuMGq4hOSOVdjsvktVnCcFJ49PS2soSEYpiVsRmA:TGq4sHVtpPnfJAS2fXXA
- TLSH T175E3D0117A908472D1A231315D75D6F2A22FB66103BD85CBBB9D1FBE5E702C18E3D32A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_3b78dd119bb36df4198d9549e83f7432_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_3b78dd119bb36df4198d9549e83f7432_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_3b78dd119bb36df4198d9549e83f7432_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- SHA256 bb088d52ed6e9b429b7f8ce79f72d3bef753bab736b4c47149e4a096599bad85
- MD5 3b78dd119bb36df4198d9549e83f7432
- SHA1 ee9a6ee7831b3324ae9f5f414e788ef8dc16b025
- SHA512 82a2eb3f85780a605ad6c88d3f31102cc0ea549cbc48d03a8727c75837397de9d5c59e6fc10d9c3ee668ccbb5f3815d4e53962572782646135a4f6e1d46c1e83
- SSDEEP 3072:vbuMGq4hOSOVdjsvktVnCcFJ49PS2soSEYpiVsRmA:TGq4sHVtpPnfJAS2fXXA
- TLSH T175E3D0117A908472D1A231315D75D6F2A22FB66103BD85CBBB9D1FBE5E702C18E3D32A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Executes dropped EXE
-
Suspicious use of SetThreadContext