General
- Target 2026-08-19_465a488013372e885c5fa1bc106cc1c9_amadey_elex_rhadamanthys_smoke-loader_strictor_wannacry
- Size 4.1MB
- Sample260819-gj3fraztcs
- SHA256 b7773d2ee6e7a6deff8e5037250094ba441cc8d68fd8bd0e6136606222652aa1
- MD5 465a488013372e885c5fa1bc106cc1c9
- SHA1 5a108ddfc3e1d802bda60bc0a2c8eada46a81b18
- SHA512 7162ee34a79d75ffe005594621f9db2035b374144f8f046660233492766f38b36a209c707dc1cf6f7d1935e1b293d24a2f899db1a2099789927ed297d090691f
- SSDEEP 98304:E4x8xcJVfPruHHuW8eRLAlRUdscUNlT6CuKgh3yhtDe2tMb54Ly8UmK37dF7GN26:FgAVfUHu1eR0ll9Nd69Ka3UD3Ly8HK3g
- TLSH T1501633327CA0C133D863727992DDF6F5557A9AA22B2188C793400BFF5C623C1967EA1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_465a488013372e885c5fa1bc106cc1c9_amadey_elex_rhadamanthys_smoke-loader_strictor_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_465a488013372e885c5fa1bc106cc1c9_amadey_elex_rhadamanthys_smoke-loader_strictor_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_465a488013372e885c5fa1bc106cc1c9_amadey_elex_rhadamanthys_smoke-loader_strictor_wannacry
- Size 4.1MB
- SHA256 b7773d2ee6e7a6deff8e5037250094ba441cc8d68fd8bd0e6136606222652aa1
- MD5 465a488013372e885c5fa1bc106cc1c9
- SHA1 5a108ddfc3e1d802bda60bc0a2c8eada46a81b18
- SHA512 7162ee34a79d75ffe005594621f9db2035b374144f8f046660233492766f38b36a209c707dc1cf6f7d1935e1b293d24a2f899db1a2099789927ed297d090691f
- SSDEEP 98304:E4x8xcJVfPruHHuW8eRLAlRUdscUNlT6CuKgh3yhtDe2tMb54Ly8UmK37dF7GN26:FgAVfUHu1eR0ll9Nd69Ka3UD3Ly8HK3g
- TLSH T1501633327CA0C133D863727992DDF6F5557A9AA22B2188C793400BFF5C623C1967EA1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.