General
- Target 2026-08-05_5f588367cd225974df5a26bb997a21c1_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- Sample260805-dlgehsce64
- SHA256 106280d05debf88d0e87b1f4d50754a7c275db7ba778caa86258b49742003b91
- MD5 5f588367cd225974df5a26bb997a21c1
- SHA1 9f8c6cffa26728a9ef65440df1f90f6383341133
- SHA512 2613a6c70954d71417cf48fa6c71e63e900c99b9bc1dcd2153ef9f9f92454c94489a39379e0cd02c62920816153a3500fea5462676117b74bc119a8ecc2dfa82
- SSDEEP 3072:vbuMGq4hOSOVEjsvm741/uMat2iDWIRFzOWxECwFN:TGq4sHV8Nk1tiHDzNxECwN
- TLSH T109E3D035B6A1C931D1A2213048A2D6B7A53B7552177901CBFB891FBE5FB06C09E3836B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_5f588367cd225974df5a26bb997a21c1_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_5f588367cd225974df5a26bb997a21c1_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_5f588367cd225974df5a26bb997a21c1_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- SHA256 106280d05debf88d0e87b1f4d50754a7c275db7ba778caa86258b49742003b91
- MD5 5f588367cd225974df5a26bb997a21c1
- SHA1 9f8c6cffa26728a9ef65440df1f90f6383341133
- SHA512 2613a6c70954d71417cf48fa6c71e63e900c99b9bc1dcd2153ef9f9f92454c94489a39379e0cd02c62920816153a3500fea5462676117b74bc119a8ecc2dfa82
- SSDEEP 3072:vbuMGq4hOSOVEjsvm741/uMat2iDWIRFzOWxECwFN:TGq4sHV8Nk1tiHDzNxECwN
- TLSH T109E3D035B6A1C931D1A2213048A2D6B7A53B7552177901CBFB891FBE5FB06C09E3836B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Executes dropped EXE
-
Suspicious use of SetThreadContext