General
- Target 2026-08-08_30f0ac405e92999ea49fbadc15ebd58c_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- Sample260808-eezg7ahk8w
- SHA256 62c3550ecb85fb1ffe087c22ee31a3f4d35a7d3c27bf7abcd411533f14130f30
- MD5 30f0ac405e92999ea49fbadc15ebd58c
- SHA1 d64a1dea77d83c4bca193ba8290e0784c8977348
- SHA512 af5799d7e984e166c144fc2c9c9dfecd4c6ed6bf3d9fba23acc966af96b89b1c03e143b00ea6914182cd608e0d5e8a5b79bcb5f238a3315a1c8bf816298af2f1
- SSDEEP 1536:gGbfmMHmqVMdaEOXCJoklecgGjfkvILjjPtl00Md11mSItJ5uLAD0TDt9nflW5Xq:vbuMGq4hOSOVGjsvOjjoL1HG5WTl3
- TLSH T156E3E0267A91C472E09326704C69D2B2E5AF396113BC42CBBB991FBE5E701C15D3836F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_30f0ac405e92999ea49fbadc15ebd58c_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_30f0ac405e92999ea49fbadc15ebd58c_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_30f0ac405e92999ea49fbadc15ebd58c_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- SHA256 62c3550ecb85fb1ffe087c22ee31a3f4d35a7d3c27bf7abcd411533f14130f30
- MD5 30f0ac405e92999ea49fbadc15ebd58c
- SHA1 d64a1dea77d83c4bca193ba8290e0784c8977348
- SHA512 af5799d7e984e166c144fc2c9c9dfecd4c6ed6bf3d9fba23acc966af96b89b1c03e143b00ea6914182cd608e0d5e8a5b79bcb5f238a3315a1c8bf816298af2f1
- SSDEEP 1536:gGbfmMHmqVMdaEOXCJoklecgGjfkvILjjPtl00Md11mSItJ5uLAD0TDt9nflW5Xq:vbuMGq4hOSOVGjsvOjjoL1HG5WTl3
- TLSH T156E3E0267A91C472E09326704C69D2B2E5AF396113BC42CBBB991FBE5E701C15D3836F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Executes dropped EXE
-
Suspicious use of SetThreadContext