General
- Target 2026-09-04_645af9c2b0fe350fbe5bd2fd2642d4e9_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- Sample260905-ks235ahn7t
- SHA256 090a08aebba1b2adda21fbae8c9d57b0b383959843ca03b2f0b096026a3fd9cf
- MD5 645af9c2b0fe350fbe5bd2fd2642d4e9
- SHA1 e81864a14cbae3a56f072ad1a4e50175e307a0ec
- SHA512 75cdee1e3dafdc1dbaa7d552e69ed71c602f4593d149ab96874a154b191cf7aaeb804aaacb9ae248b9b61b797a7c882f9821d3c2461c59ae91f20c46a3d5ef40
- SSDEEP 3072:vbuMGq4hOSOVNjsv52NSvLH8AGrXpxofYAJNOZXGneDhSoq4:TGq4sHVd5NSvDVGrXp4jPOZXnQoL
- TLSH T1DAE3E0237590D876D1A326306CA195B3A52E38B113F845CBBB991B7E5FB06C05E3932F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_645af9c2b0fe350fbe5bd2fd2642d4e9_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-04_645af9c2b0fe350fbe5bd2fd2642d4e9_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_645af9c2b0fe350fbe5bd2fd2642d4e9_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- SHA256 090a08aebba1b2adda21fbae8c9d57b0b383959843ca03b2f0b096026a3fd9cf
- MD5 645af9c2b0fe350fbe5bd2fd2642d4e9
- SHA1 e81864a14cbae3a56f072ad1a4e50175e307a0ec
- SHA512 75cdee1e3dafdc1dbaa7d552e69ed71c602f4593d149ab96874a154b191cf7aaeb804aaacb9ae248b9b61b797a7c882f9821d3c2461c59ae91f20c46a3d5ef40
- SSDEEP 3072:vbuMGq4hOSOVNjsv52NSvLH8AGrXpxofYAJNOZXGneDhSoq4:TGq4sHVd5NSvDVGrXp4jPOZXnQoL
- TLSH T1DAE3E0237590D876D1A326306CA195B3A52E38B113F845CBBB991B7E5FB06C05E3932F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Executes dropped EXE
-
Suspicious use of SetThreadContext