General
- Target 2026-08-05_e1d6bbcf249e5a14d05f9a5fca0b14e1_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- Sample260805-vr1tsacf99
- SHA256 ae8b5cf43b463b0625dfba2b1f30f23c10e7c6242de3dc74896c5e95eb46413a
- MD5 e1d6bbcf249e5a14d05f9a5fca0b14e1
- SHA1 f5beac1e88e5b673e5762cc34bf4a45d6e77f3a4
- SHA512 053d2c5ecc58735e438dba2468d516f68b0592bbe7f623349f9c8693667fdd279ebe0fc5023092ef7835dd0614bbeabd4bef438357ae39ff05e8f4ef820669b3
- SSDEEP 3072:vbuMGq4hOSOVOSjsvhAtAr2oX/sP+OUjmmrBv4DtmfQY1/31H2:TGq4sHVO+E2wOAfVem/R31W
- TLSH T192E3E021BBA1C472E52321305CB181B6A67B7592177845DBBBD91FBE8F702C05E3932B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_e1d6bbcf249e5a14d05f9a5fca0b14e1_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_e1d6bbcf249e5a14d05f9a5fca0b14e1_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_e1d6bbcf249e5a14d05f9a5fca0b14e1_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- SHA256 ae8b5cf43b463b0625dfba2b1f30f23c10e7c6242de3dc74896c5e95eb46413a
- MD5 e1d6bbcf249e5a14d05f9a5fca0b14e1
- SHA1 f5beac1e88e5b673e5762cc34bf4a45d6e77f3a4
- SHA512 053d2c5ecc58735e438dba2468d516f68b0592bbe7f623349f9c8693667fdd279ebe0fc5023092ef7835dd0614bbeabd4bef438357ae39ff05e8f4ef820669b3
- SSDEEP 3072:vbuMGq4hOSOVOSjsvhAtAr2oX/sP+OUjmmrBv4DtmfQY1/31H2:TGq4sHVO+E2wOAfVem/R31W
- TLSH T192E3E021BBA1C472E52321305CB181B6A67B7592177845DBBBD91FBE8F702C05E3932B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Executes dropped EXE
-
Suspicious use of SetThreadContext