General
- Target 2026-08-04_2899ed648843f24cd15126f832a275fc_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- Sample260804-znaweazdpd
- SHA256 d3eeb6707f7955bb82a7d9bf2eb69ebccc68d2d657b47844e3a1784e7ee7e9e1
- MD5 2899ed648843f24cd15126f832a275fc
- SHA1 4262ea9350778a11c9f56e4fc72ef14396c77653
- SHA512 4a9fa8ff41fcfd4661e7d5c5dd0397b8381d9616b95aff9f062a8687787b2cff5f50882907b3d59e1575da8d2bd9266ac4b1778b04e55c85480cbc0ec1b1fdfa
- SSDEEP 3072:vbuMGq4hOSOVijsvLMhrWG7ScOEAHl5niajcJP2e2I+6J6meydc9:TGq4sHVOmGmNEEqajo+eymrdc9
- TLSH T12DE3D02279909472E5A32670597192B3A21F763157BC02CBB7982F7D2F705C19E3836F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_2899ed648843f24cd15126f832a275fc_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_2899ed648843f24cd15126f832a275fc_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_2899ed648843f24cd15126f832a275fc_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- SHA256 d3eeb6707f7955bb82a7d9bf2eb69ebccc68d2d657b47844e3a1784e7ee7e9e1
- MD5 2899ed648843f24cd15126f832a275fc
- SHA1 4262ea9350778a11c9f56e4fc72ef14396c77653
- SHA512 4a9fa8ff41fcfd4661e7d5c5dd0397b8381d9616b95aff9f062a8687787b2cff5f50882907b3d59e1575da8d2bd9266ac4b1778b04e55c85480cbc0ec1b1fdfa
- SSDEEP 3072:vbuMGq4hOSOVijsvLMhrWG7ScOEAHl5niajcJP2e2I+6J6meydc9:TGq4sHVOmGmNEEqajo+eymrdc9
- TLSH T12DE3D02279909472E5A32670597192B3A21F763157BC02CBB7982F7D2F705C19E3836F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Executes dropped EXE
-
Suspicious use of SetThreadContext