General
- Target 2026-09-06_5830d9fd85a6fbbc8cd7465810f1dffa_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 1.5MB
- Sample260907-dge1wsxemb
- SHA256 5b3a9b49c78189ca6988afe6284da5dcef1572d001ebd662e7b95ccc618fd7cb
- MD5 5830d9fd85a6fbbc8cd7465810f1dffa
- SHA1 9a5ae35565527bf8d7b1f50b7b4e7b7b58980735
- SHA512 25ad6fda6e2e961e77f67a9b40b9559bbff950131d5d140b96cc155a7e33a8859c0f8d294f29cffde8946457131edbeba840afdf3ce947e5f8a5418bfa6bfd8f
- SSDEEP 24576:/DDhRYL+krTq+NNLwexaR8cKR5CkJJFJ3ShcD:7DhRfeTq+NNLwex+8ck5Ckb3SyD
- TLSH T12375E02532C0C072D46728324666C3F25F3B78B1576AA98FBBC54B780F35BE1EA25359
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-06_5830d9fd85a6fbbc8cd7465810f1dffa_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-06_5830d9fd85a6fbbc8cd7465810f1dffa_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 1.5MB
- SHA256 5b3a9b49c78189ca6988afe6284da5dcef1572d001ebd662e7b95ccc618fd7cb
- MD5 5830d9fd85a6fbbc8cd7465810f1dffa
- SHA1 9a5ae35565527bf8d7b1f50b7b4e7b7b58980735
- SHA512 25ad6fda6e2e961e77f67a9b40b9559bbff950131d5d140b96cc155a7e33a8859c0f8d294f29cffde8946457131edbeba840afdf3ce947e5f8a5418bfa6bfd8f
- SSDEEP 24576:/DDhRYL+krTq+NNLwexaR8cKR5CkJJFJ3ShcD:7DhRfeTq+NNLwex+8ck5Ckb3SyD
- TLSH T12375E02532C0C072D46728324666C3F25F3B78B1576AA98FBBC54B780F35BE1EA25359
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1