General
- Target 2026-08-21_27a72a49ab7c5ec4b0de1af77a066a72_amadey_elex_rhadamanthys_smoke-loader_stealc_swisyn
- Size 198KB
- Sample260821-ff1x3sxtay
- SHA256 a912009565634324f0812e36fcae3b8a8f99cef44e666dcd87d9d5a099f42293
- MD5 27a72a49ab7c5ec4b0de1af77a066a72
- SHA1 30fa9925d713f9ad425c09c703c170f998b6b72d
- SHA512 4cf2820046eb0f458778fd52a5721e3eb099af11d3f03c484fb453d9e35fbfcdc796347eba24face2f5d71649b52d7fedc3b886f3e8d199d0e08bc819f6f0075
- SSDEEP 3072:UVqoCl/YgjxEufVU0TbTyDDalRE999999999999999999999999999999999999F:UsLqdufVUNDaFE2R7Jsj5
- TLSH T1E2143B23BE14903FE86284F02874D7A9B9632D350BE59C4737567B1869B12C7B5F831B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-21_27a72a49ab7c5ec4b0de1af77a066a72_amadey_elex_rhadamanthys_smoke-loader_stealc_swisyn.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_27a72a49ab7c5ec4b0de1af77a066a72_amadey_elex_rhadamanthys_smoke-loader_stealc_swisyn.exe
Resource
win11ltsc2024-20260710-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_27a72a49ab7c5ec4b0de1af77a066a72_amadey_elex_rhadamanthys_smoke-loader_stealc_swisyn
- Size 198KB
- SHA256 a912009565634324f0812e36fcae3b8a8f99cef44e666dcd87d9d5a099f42293
- MD5 27a72a49ab7c5ec4b0de1af77a066a72
- SHA1 30fa9925d713f9ad425c09c703c170f998b6b72d
- SHA512 4cf2820046eb0f458778fd52a5721e3eb099af11d3f03c484fb453d9e35fbfcdc796347eba24face2f5d71649b52d7fedc3b886f3e8d199d0e08bc819f6f0075
- SSDEEP 3072:UVqoCl/YgjxEufVU0TbTyDDalRE999999999999999999999999999999999999F:UsLqdufVUNDaFE2R7Jsj5
- TLSH T1E2143B23BE14903FE86284F02874D7A9B9632D350BE59C4737567B1869B12C7B5F831B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory