General
- Target 2026-08-11_4e1cf88598332523ad0485085238523d_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- Sample260811-vm3skshp91
- SHA256 a2f765c2ef9cb43beb387303ec9d20e0352803ca2437c71861a24220569e8c1e
- MD5 4e1cf88598332523ad0485085238523d
- SHA1 c4f173144841bbefba9736d8fca887925423adeb
- SHA512 d1010c71b5842f6694fa64bb12bc12126f9c78aa4b28a5a96b29e27649d40d382b429998349b252dd8e803537cdbbf6dd6321c98c056f90af5306f8db81c357a
- SSDEEP 3072:vbuMGq4hOSOVOjsv1FvhSO8U6oQmT2fk1woOiwKZrXPiHORLJpcB+tu:TGq4sHVyKFvhST+QmTekx5wK5PcOziV
- TLSH T12AE3D0217AA0C471D163267048B0A6B3A53BB56153B945CBBB9C0FBE5EB02D19E3C35F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-11_4e1cf88598332523ad0485085238523d_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-11_4e1cf88598332523ad0485085238523d_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-11_4e1cf88598332523ad0485085238523d_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- SHA256 a2f765c2ef9cb43beb387303ec9d20e0352803ca2437c71861a24220569e8c1e
- MD5 4e1cf88598332523ad0485085238523d
- SHA1 c4f173144841bbefba9736d8fca887925423adeb
- SHA512 d1010c71b5842f6694fa64bb12bc12126f9c78aa4b28a5a96b29e27649d40d382b429998349b252dd8e803537cdbbf6dd6321c98c056f90af5306f8db81c357a
- SSDEEP 3072:vbuMGq4hOSOVOjsv1FvhSO8U6oQmT2fk1woOiwKZrXPiHORLJpcB+tu:TGq4sHVyKFvhST+QmTekx5wK5PcOziV
- TLSH T12AE3D0217AA0C471D163267048B0A6B3A53BB56153B945CBBB9C0FBE5EB02D19E3C35F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Executes dropped EXE
-
Suspicious use of SetThreadContext