General
- Target 2026-10-02_e9f94d359ede3c8a3ba26d2874eb2c89_amadey_elex_rhadamanthys_smoke-loader_stop_wannacry
- Size 95KB
- Sample261002-3dtgjsverb
- SHA256 02c6f140eb8f6528f01ef78e9d49943ed76649857bdad1ff2dde7c3d6530896b
- MD5 e9f94d359ede3c8a3ba26d2874eb2c89
- SHA1 f9f1b71104ce43ea389e55b4256e35dc3b8f78cf
- SHA512 0fa31a2f6995531ca91b64b0de3e21f0f7d790c26ea95362ccee4c79fe57c656b14c350b133b160cd511c856b71e571cb8e84e18fda684c4a8bd75424d90874e
- SSDEEP 1536:2FbeITsAro5ZNjzFmAa6IBA2oESRF6gQ+bfSgTrnaMGtlUtilt81t2omCEi15:2FawsA+HjzFmRa2MF9btHaUtilt81soz
- TLSH T11593D003BAD3C0B6E46606B018BA9E829777BF111BA7C90767F4374F2D31684D926397
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-10-02_e9f94d359ede3c8a3ba26d2874eb2c89_amadey_elex_rhadamanthys_smoke-loader_stop_wannacry.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-02_e9f94d359ede3c8a3ba26d2874eb2c89_amadey_elex_rhadamanthys_smoke-loader_stop_wannacry.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-02_e9f94d359ede3c8a3ba26d2874eb2c89_amadey_elex_rhadamanthys_smoke-loader_stop_wannacry
- Size 95KB
- SHA256 02c6f140eb8f6528f01ef78e9d49943ed76649857bdad1ff2dde7c3d6530896b
- MD5 e9f94d359ede3c8a3ba26d2874eb2c89
- SHA1 f9f1b71104ce43ea389e55b4256e35dc3b8f78cf
- SHA512 0fa31a2f6995531ca91b64b0de3e21f0f7d790c26ea95362ccee4c79fe57c656b14c350b133b160cd511c856b71e571cb8e84e18fda684c4a8bd75424d90874e
- SSDEEP 1536:2FbeITsAro5ZNjzFmAa6IBA2oESRF6gQ+bfSgTrnaMGtlUtilt81t2omCEi15:2FawsA+HjzFmRa2MF9btHaUtilt81soz
- TLSH T11593D003BAD3C0B6E46606B018BA9E829777BF111BA7C90767F4374F2D31684D926397
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with ASPack
-
Executes dropped EXE
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1