General
- Target 2026-08-05_3a52ac3fb87915ba035c84673927e587_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- Sample260805-nb5pgaac95
- SHA256 89cbf6240d4397fc6b34912985b320a1c8cd6a616afd6ec2da46427e95207d01
- MD5 3a52ac3fb87915ba035c84673927e587
- SHA1 1328fdbe7dc87a1ef089d8bb7258ee47d2aab617
- SHA512 188d1f1facfb6a0e7ac20a601a932caf4c027fb9e95a30cc15d5b1a8622345c463ec7069b55579da40fb5cab337675ab949ef3e74f8d40ff74399346faa846cb
- SSDEEP 3072:vbuMGq4hOSOVNjsvvxTOHLEwACT0LP1k9EtiLfLMYqS:TGq4sHVdyg1BT0LP1kQiLfLOS
- TLSH T145E3F126B950D836D06326345C7591B7A56FB4A2237812CB778C2FBE1E707C19E3836B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_3a52ac3fb87915ba035c84673927e587_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_3a52ac3fb87915ba035c84673927e587_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_3a52ac3fb87915ba035c84673927e587_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- SHA256 89cbf6240d4397fc6b34912985b320a1c8cd6a616afd6ec2da46427e95207d01
- MD5 3a52ac3fb87915ba035c84673927e587
- SHA1 1328fdbe7dc87a1ef089d8bb7258ee47d2aab617
- SHA512 188d1f1facfb6a0e7ac20a601a932caf4c027fb9e95a30cc15d5b1a8622345c463ec7069b55579da40fb5cab337675ab949ef3e74f8d40ff74399346faa846cb
- SSDEEP 3072:vbuMGq4hOSOVNjsvvxTOHLEwACT0LP1k9EtiLfLMYqS:TGq4sHVdyg1BT0LP1kQiLfLOS
- TLSH T145E3F126B950D836D06326345C7591B7A56FB4A2237812CB778C2FBE1E707C19E3836B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Executes dropped EXE
-
Suspicious use of SetThreadContext