General
- Target 2026-08-05_64391982d9f430e3772c345265207605_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- Sample260805-m65saaab84
- SHA256 8d2a5019304ed5233d1051c6919a2b3332da56f77961556151c4e34a22786a2e
- MD5 64391982d9f430e3772c345265207605
- SHA1 f9c4d7ea2bf5c605b757badc8668950e81bf98ce
- SHA512 7af7639d996efce3fd3f1c93ee91b33f39a60eac692158cfde408bcb70fc395f18b0d8b87f1883e6120d3f2b6199148b5069a4f73e11874d7574b0d5e45d7179
- SSDEEP 3072:vbuMGq4hOSOVwjsvHYcnpyOUMOZdDcD6n84nVnF:TGq4sHVwBQ2tcDmvnZF
- TLSH T12FE3E0117A909433D16322706875E1B3A56B74A113B946CBBBD91FBE9E706C09F3832B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_64391982d9f430e3772c345265207605_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_64391982d9f430e3772c345265207605_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win11ltsc2024-20260710-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_64391982d9f430e3772c345265207605_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- SHA256 8d2a5019304ed5233d1051c6919a2b3332da56f77961556151c4e34a22786a2e
- MD5 64391982d9f430e3772c345265207605
- SHA1 f9c4d7ea2bf5c605b757badc8668950e81bf98ce
- SHA512 7af7639d996efce3fd3f1c93ee91b33f39a60eac692158cfde408bcb70fc395f18b0d8b87f1883e6120d3f2b6199148b5069a4f73e11874d7574b0d5e45d7179
- SSDEEP 3072:vbuMGq4hOSOVwjsvHYcnpyOUMOZdDcD6n84nVnF:TGq4sHVwBQ2tcDmvnZF
- TLSH T12FE3E0117A909433D16322706875E1B3A56B74A113B946CBBBD91FBE9E706C09F3832B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Executes dropped EXE
-
Suspicious use of SetThreadContext