General
- Target 2026-08-09_4c76ceb7c92f28f41c75e96143c0424a_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- Sample260809-hnee6awwaw
- SHA256 b1f5d636585f83dde527a2a2374656e51db67686cf6cdff967f995f854f36ea8
- MD5 4c76ceb7c92f28f41c75e96143c0424a
- SHA1 b412106d86742f77d1807e5b8f7b14a23fbf52d7
- SHA512 f36a0056a9890af0f0d7165183848ed02675254f61a792760e5d985417123e14009816e3d5588918d6128695210f841fdf684e41fe417cd7405a3ebef56da60f
- SSDEEP 3072:vbuMGq4hOSOVzjsvYJu+ekcbuijo6g9056FZODG30rHaIV3NuRb:TGq4sHVnxuVuijY94DY0r6IV3ob
- TLSH T19FE3D0157A96D832D16226305871D7B3A52B79512BB841C7BB8C0FFE6EB06C09E3835E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_4c76ceb7c92f28f41c75e96143c0424a_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_4c76ceb7c92f28f41c75e96143c0424a_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_4c76ceb7c92f28f41c75e96143c0424a_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- SHA256 b1f5d636585f83dde527a2a2374656e51db67686cf6cdff967f995f854f36ea8
- MD5 4c76ceb7c92f28f41c75e96143c0424a
- SHA1 b412106d86742f77d1807e5b8f7b14a23fbf52d7
- SHA512 f36a0056a9890af0f0d7165183848ed02675254f61a792760e5d985417123e14009816e3d5588918d6128695210f841fdf684e41fe417cd7405a3ebef56da60f
- SSDEEP 3072:vbuMGq4hOSOVzjsvYJu+ekcbuijo6g9056FZODG30rHaIV3NuRb:TGq4sHVnxuVuijY94DY0r6IV3ob
- TLSH T19FE3D0157A96D832D16226305871D7B3A52B79512BB841C7BB8C0FFE6EB06C09E3835E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Executes dropped EXE
-
Suspicious use of SetThreadContext