General
- Target 2026-08-12_c9f710af36676ea3994af55552d7a4fb_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- Sample260813-afa4rsgk31
- SHA256 02c5ae96d7aa9228e04982f81da386c2676557285d08c1551736ce334b4e0c45
- MD5 c9f710af36676ea3994af55552d7a4fb
- SHA1 2bd870daabb1c7c47835ac758d2fa723d722e7f9
- SHA512 fe64f4a98d57adecac0a3f5594469a8cf83c1f5ab363b054204505ddb754ed48e51c49b52a0f7e48cac6a652a9d4521794f97451004365c3315b5729914f578f
- SSDEEP 3072:vbuMGq4hOSOV0jsv9pbcpW1kXARBtJ3Dag88TIwfRw8GfdCcs:TGq4sHVsab/Rjzeg8Gf6TfdCcs
- TLSH T180E3E115BA91C032E12226709D7295B2A63B74A1577852CBB7982FFE5F303C09E3935B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_c9f710af36676ea3994af55552d7a4fb_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_c9f710af36676ea3994af55552d7a4fb_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_c9f710af36676ea3994af55552d7a4fb_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- SHA256 02c5ae96d7aa9228e04982f81da386c2676557285d08c1551736ce334b4e0c45
- MD5 c9f710af36676ea3994af55552d7a4fb
- SHA1 2bd870daabb1c7c47835ac758d2fa723d722e7f9
- SHA512 fe64f4a98d57adecac0a3f5594469a8cf83c1f5ab363b054204505ddb754ed48e51c49b52a0f7e48cac6a652a9d4521794f97451004365c3315b5729914f578f
- SSDEEP 3072:vbuMGq4hOSOV0jsv9pbcpW1kXARBtJ3Dag88TIwfRw8GfdCcs:TGq4sHVsab/Rjzeg8Gf6TfdCcs
- TLSH T180E3E115BA91C032E12226709D7295B2A63B74A1577852CBB7982FFE5F303C09E3935B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Executes dropped EXE
-
Suspicious use of SetThreadContext