General
- Target 2026-08-08_22f721c484f761ef3bc277eee59e33c4_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- Sample260808-eh3c9asygy
- SHA256 b7bab35427121b12b126b91583911af13e0d9ad776e108957558e3c0c2dd53c3
- MD5 22f721c484f761ef3bc277eee59e33c4
- SHA1 d50c7cb4e32884e9f4878b3d6401f1e0fdb60d0d
- SHA512 fb81e524c5953e8f9a9aacdf235a9cb0ffba982a25133d6948ec13af42f403659982f9fcc8142774c1bdabea035c04ee3bd7c31ffcfafb8ebe496228c8bb53ee
- SSDEEP 3072:vbuMGq4hOSOVXjsv+k6vb2K25BGdlHLaVkHWvNH20LkRv:TGq4sHVTHky2VGfHLOiW86kF
- TLSH T171E3D0123AA0C472E19316305C75D6F2A56B756257B846CBBB881FBD6F702C19E3C32B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_22f721c484f761ef3bc277eee59e33c4_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_22f721c484f761ef3bc277eee59e33c4_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_22f721c484f761ef3bc277eee59e33c4_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- SHA256 b7bab35427121b12b126b91583911af13e0d9ad776e108957558e3c0c2dd53c3
- MD5 22f721c484f761ef3bc277eee59e33c4
- SHA1 d50c7cb4e32884e9f4878b3d6401f1e0fdb60d0d
- SHA512 fb81e524c5953e8f9a9aacdf235a9cb0ffba982a25133d6948ec13af42f403659982f9fcc8142774c1bdabea035c04ee3bd7c31ffcfafb8ebe496228c8bb53ee
- SSDEEP 3072:vbuMGq4hOSOVXjsv+k6vb2K25BGdlHLaVkHWvNH20LkRv:TGq4sHVTHky2VGfHLOiW86kF
- TLSH T171E3D0123AA0C472E19316305C75D6F2A56B756257B846CBBB881FBD6F702C19E3C32B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Executes dropped EXE
-
Suspicious use of SetThreadContext