General
- Target 2026-08-09_57e4d7c5d338c13e53d26abe29a648de_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- Sample260809-w8dk9awzc1
- SHA256 3399dd3c33e10b97476c8810bc93f250bfe83e45ee931d219cddb9fba44e91a5
- MD5 57e4d7c5d338c13e53d26abe29a648de
- SHA1 f79b8f9999dbf5af13595799f3f3e5c48dd48dbe
- SHA512 2494f82be7ac6253f61448da99fb4e22cfffb579d547e0064704f43edc86805f32144b4035e4ed22471c7522239bf26b4ddea14e844591e94707dafe23a00484
- SSDEEP 3072:vbuMGq4hOSOVejsvSkQJsNaAYhnoy8iZcIeVorQpjxTkDdChdr:TGq4sHVChH9hoBycIeiMNTkD43r
- TLSH T1FEE3D0257560D832E12325704C74D6B3B26B796143B842C777AC1FBE5FB02C19A7876B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_57e4d7c5d338c13e53d26abe29a648de_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_57e4d7c5d338c13e53d26abe29a648de_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win11ltsc2024-20260710-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_57e4d7c5d338c13e53d26abe29a648de_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- SHA256 3399dd3c33e10b97476c8810bc93f250bfe83e45ee931d219cddb9fba44e91a5
- MD5 57e4d7c5d338c13e53d26abe29a648de
- SHA1 f79b8f9999dbf5af13595799f3f3e5c48dd48dbe
- SHA512 2494f82be7ac6253f61448da99fb4e22cfffb579d547e0064704f43edc86805f32144b4035e4ed22471c7522239bf26b4ddea14e844591e94707dafe23a00484
- SSDEEP 3072:vbuMGq4hOSOVejsvSkQJsNaAYhnoy8iZcIeVorQpjxTkDdChdr:TGq4sHVChH9hoBycIeiMNTkD43r
- TLSH T1FEE3D0257560D832E12325704C74D6B3B26B796143B842C777AC1FBE5FB02C19A7876B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Executes dropped EXE
-
Suspicious use of SetThreadContext