General
- Target 2026-08-19_ebc0a51ac57b7ebfe8363f7729cf879d_amadey_elex_rhadamanthys_smoke-loader_strictor_wannacry
- Size 3.1MB
- Sample260819-ehy1tsdk6s
- SHA256 eef4cbb33ca0da41ee146ef0c71e2cd2c6af60bbeb12ef52bc6a709080acb00f
- MD5 ebc0a51ac57b7ebfe8363f7729cf879d
- SHA1 167ecd80171562bbf8e0c2620092221e408ff39b
- SHA512 67638d9c72834f62ce540eae9e23bfea60a90895f8ac71497912cdad95097139092150f48e27cdd92cc35590cdd74e47e6580b49b85128b7a9f91235a17803e5
- SSDEEP 49152:E4x8x9yKRhnn7R7/6OwPWdOl9EJd8Z5JzNEFoCS/rffcxjAjzdCzrQ8k26Xk:E4x8x93RNMWR+Z5JzNEFWrfkMqM8k27
- TLSH T157E533317BE59173D4C725B8868EBB749ABE572103708CDB978017DE28357C0BA3A35A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_ebc0a51ac57b7ebfe8363f7729cf879d_amadey_elex_rhadamanthys_smoke-loader_strictor_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_ebc0a51ac57b7ebfe8363f7729cf879d_amadey_elex_rhadamanthys_smoke-loader_strictor_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_ebc0a51ac57b7ebfe8363f7729cf879d_amadey_elex_rhadamanthys_smoke-loader_strictor_wannacry
- Size 3.1MB
- SHA256 eef4cbb33ca0da41ee146ef0c71e2cd2c6af60bbeb12ef52bc6a709080acb00f
- MD5 ebc0a51ac57b7ebfe8363f7729cf879d
- SHA1 167ecd80171562bbf8e0c2620092221e408ff39b
- SHA512 67638d9c72834f62ce540eae9e23bfea60a90895f8ac71497912cdad95097139092150f48e27cdd92cc35590cdd74e47e6580b49b85128b7a9f91235a17803e5
- SSDEEP 49152:E4x8x9yKRhnn7R7/6OwPWdOl9EJd8Z5JzNEFoCS/rffcxjAjzdCzrQ8k26Xk:E4x8x93RNMWR+Z5JzNEFWrfkMqM8k27
- TLSH T157E533317BE59173D4C725B8868EBB749ABE572103708CDB978017DE28357C0BA3A35A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.