General
- Target 2026-09-04_6500df9817aee506aaef1220a5be8855_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- Sample260905-kpyarshm9s
- SHA256 8a87dddba8983960d094b3233d2e623a720edf91d866e1713f09f534771512a4
- MD5 6500df9817aee506aaef1220a5be8855
- SHA1 f23eef8fe2e3d50b51a1bba11b6ee9cc857288d1
- SHA512 d5f15d70ae342c356c9340037b3be731f19cce3adc0ac124e259d319b3a09bfb3b6718a339337332613da13fc243e74efc22a166f30cf001243c8121cb0ff298
- SSDEEP 3072:vbuMGq4hOSOVyjsv+9YrofunEQE4CGESjeygiz6ztE6i:TGq4sHVeTKofunEJ4SSjeytZ
- TLSH T1E7E3E025BA91D536E1A332306C75A2B3B22BB462177805CB77992FBD2F605C08E3435B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_6500df9817aee506aaef1220a5be8855_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-04_6500df9817aee506aaef1220a5be8855_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_6500df9817aee506aaef1220a5be8855_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- SHA256 8a87dddba8983960d094b3233d2e623a720edf91d866e1713f09f534771512a4
- MD5 6500df9817aee506aaef1220a5be8855
- SHA1 f23eef8fe2e3d50b51a1bba11b6ee9cc857288d1
- SHA512 d5f15d70ae342c356c9340037b3be731f19cce3adc0ac124e259d319b3a09bfb3b6718a339337332613da13fc243e74efc22a166f30cf001243c8121cb0ff298
- SSDEEP 3072:vbuMGq4hOSOVyjsv+9YrofunEQE4CGESjeygiz6ztE6i:TGq4sHVeTKofunEJ4SSjeytZ
- TLSH T1E7E3E025BA91D536E1A332306C75A2B3B22BB462177805CB77992FBD2F605C08E3435B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Executes dropped EXE
-
Suspicious use of SetThreadContext