General
- Target 2026-08-12_0c91d5b2e00945819e495918c0415ed0_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- Sample260813-ca1tcagb88
- SHA256 d58e7f42c45269d2b471860d92513348bb3c79cfe011ce22a44a01e5381c6d85
- MD5 0c91d5b2e00945819e495918c0415ed0
- SHA1 6fc4f6d994ed3d36bdf67eb9384b21e91091d4fe
- SHA512 978eb2046bb886e27588597ef44271f0c00ce7dd9950e78a1efa900890c90310caa1da11fdc89e453508de9e0ed07b8876f1692e9508adec1e2c7a81d41b3453
- SSDEEP 3072:vbuMGq4hOSOVkjsvA7Jl9jkpoh3iBCvLVjhl13WF:TGq4sHVcNlqoagVjdGF
- TLSH T174E3E021B950D872E1A3267058B1D1B2966BB861037E46CBBB9C1FFE5E305C14F3936B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_0c91d5b2e00945819e495918c0415ed0_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_0c91d5b2e00945819e495918c0415ed0_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_0c91d5b2e00945819e495918c0415ed0_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- SHA256 d58e7f42c45269d2b471860d92513348bb3c79cfe011ce22a44a01e5381c6d85
- MD5 0c91d5b2e00945819e495918c0415ed0
- SHA1 6fc4f6d994ed3d36bdf67eb9384b21e91091d4fe
- SHA512 978eb2046bb886e27588597ef44271f0c00ce7dd9950e78a1efa900890c90310caa1da11fdc89e453508de9e0ed07b8876f1692e9508adec1e2c7a81d41b3453
- SSDEEP 3072:vbuMGq4hOSOVkjsvA7Jl9jkpoh3iBCvLVjhl13WF:TGq4sHVcNlqoagVjdGF
- TLSH T174E3E021B950D872E1A3267058B1D1B2966BB861037E46CBBB9C1FFE5E305C14F3936B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Executes dropped EXE
-
Suspicious use of SetThreadContext