General
- Target 2026-08-04_21e2a0c8e088483494a9dec67c67492c_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- Sample260804-zry3eazene
- SHA256 9ddf75d6eef7036fa2b074c8f7fc1cdbf41a5be8b7956efc54dfd7b7c5c1fa10
- MD5 21e2a0c8e088483494a9dec67c67492c
- SHA1 538131003d4670d58615412668c1a24a89a51bdd
- SHA512 dfe7697d3c6d6591394ed76fb239139555230710e0c7c09b1d1d47ba18adbc439373821f32948f0c5061c6cb9954d28f4049b4011422a0728779e7e5d855adb5
- SSDEEP 3072:vbuMGq4hOSOVdjsviYnsYgWCWJ2J59rMgtQBZkXr+sXFVmboNww5v:TGq4sHVtNQsYtB2/MLZ9sVVFZv
- TLSH T111E3E0217A91C872D16226B00D7197B3A65BB452277842CBBB891FBD8F706C09F3C35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_21e2a0c8e088483494a9dec67c67492c_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_21e2a0c8e088483494a9dec67c67492c_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_21e2a0c8e088483494a9dec67c67492c_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- SHA256 9ddf75d6eef7036fa2b074c8f7fc1cdbf41a5be8b7956efc54dfd7b7c5c1fa10
- MD5 21e2a0c8e088483494a9dec67c67492c
- SHA1 538131003d4670d58615412668c1a24a89a51bdd
- SHA512 dfe7697d3c6d6591394ed76fb239139555230710e0c7c09b1d1d47ba18adbc439373821f32948f0c5061c6cb9954d28f4049b4011422a0728779e7e5d855adb5
- SSDEEP 3072:vbuMGq4hOSOVdjsviYnsYgWCWJ2J59rMgtQBZkXr+sXFVmboNww5v:TGq4sHVtNQsYtB2/MLZ9sVVFZv
- TLSH T111E3E0217A91C872D16226B00D7197B3A65BB452277842CBBB891FBD8F706C09F3C35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Executes dropped EXE
-
Suspicious use of SetThreadContext