General
- Target 2026-08-06_da4be8f64f490cb103c52448429ba63a_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- Sample260806-bhck2sfa57
- SHA256 5ad02687650771bb7f0b166e3d48ae5ab76c57b9633bef0c6750710787624cd5
- MD5 da4be8f64f490cb103c52448429ba63a
- SHA1 0e6cd1f47a3c12d8e6b4d9650bb26c6f5e8a2460
- SHA512 2c974e2659408ccc4b348368a99d09f953c20ddd2937a6ee031dcb7c74384c64f13b15de35ac72031691a99af438c7e7af61d8dfb4f943a632114a7ec05acd75
- SSDEEP 3072:vbuMGq4hOSOVCjsv0saKarw4IfhCrYmV+SZtIzpE/Riw50whF:TGq4sHVu7XzYvbFQ0OF
- TLSH T1AEE3E121BA61C4B2D16316705DA1E2F2A26B756223BC41CB77D81BBE5E706C05E3C72B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-06_da4be8f64f490cb103c52448429ba63a_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_da4be8f64f490cb103c52448429ba63a_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_da4be8f64f490cb103c52448429ba63a_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- SHA256 5ad02687650771bb7f0b166e3d48ae5ab76c57b9633bef0c6750710787624cd5
- MD5 da4be8f64f490cb103c52448429ba63a
- SHA1 0e6cd1f47a3c12d8e6b4d9650bb26c6f5e8a2460
- SHA512 2c974e2659408ccc4b348368a99d09f953c20ddd2937a6ee031dcb7c74384c64f13b15de35ac72031691a99af438c7e7af61d8dfb4f943a632114a7ec05acd75
- SSDEEP 3072:vbuMGq4hOSOVCjsv0saKarw4IfhCrYmV+SZtIzpE/Riw50whF:TGq4sHVu7XzYvbFQ0OF
- TLSH T1AEE3E121BA61C4B2D16316705DA1E2F2A26B756223BC41CB77D81BBE5E706C05E3C72B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Executes dropped EXE
-
Suspicious use of SetThreadContext