General
- Target 2026-08-08_d3b7ec948e6bc83ff2398f29a8732449_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- Sample260808-vrftlsan7t
- SHA256 e987da425590df8174403eab9678acd392229859cce752971b111a1351511ae5
- MD5 d3b7ec948e6bc83ff2398f29a8732449
- SHA1 686aeb48fd596921faf4f8585f576f2650aea58a
- SHA512 5673f20d4d9e0586b64cb2601adc7288f1cf095a7bfcbd8dfc620151ec3bb9743ad05537c9e2103bc65320a8f86a1b3e7c609a721ce9dcc2b43e4edd8f273878
- SSDEEP 3072:vbuMGq4hOSOVbjsvlTrp0xQRPwTc5qgGL1NcokweGs3JtQNP:TGq4sHVPoJ0GtwWqgm1Nx0JtQt
- TLSH T194E3E11579819472D0A226704CB1D9F3A12BB96223B946CB739C0BBE5F706C19E3D36F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_d3b7ec948e6bc83ff2398f29a8732449_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_d3b7ec948e6bc83ff2398f29a8732449_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win11ltsc2024-20260710-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_d3b7ec948e6bc83ff2398f29a8732449_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- SHA256 e987da425590df8174403eab9678acd392229859cce752971b111a1351511ae5
- MD5 d3b7ec948e6bc83ff2398f29a8732449
- SHA1 686aeb48fd596921faf4f8585f576f2650aea58a
- SHA512 5673f20d4d9e0586b64cb2601adc7288f1cf095a7bfcbd8dfc620151ec3bb9743ad05537c9e2103bc65320a8f86a1b3e7c609a721ce9dcc2b43e4edd8f273878
- SSDEEP 3072:vbuMGq4hOSOVbjsvlTrp0xQRPwTc5qgGL1NcokweGs3JtQNP:TGq4sHVPoJ0GtwWqgm1Nx0JtQt
- TLSH T194E3E11579819472D0A226704CB1D9F3A12BB96223B946CB739C0BBE5F706C19E3D36F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Executes dropped EXE
-
Suspicious use of SetThreadContext