General
- Target 2026-10-06_6d76bed158c41e3ae27a6a8f4306760b_amadey_elex_ramnit_rhadamanthys_smoke-loader_stop
- Size 632KB
- Sample261006-pterfagw9t
- SHA256 ed52883457f00237d90a60b018befae0c8f8f691d681d0e425d22db4f1e4bb22
- MD5 6d76bed158c41e3ae27a6a8f4306760b
- SHA1 3e0db545029695408d369d030d885430bb6ddea4
- SHA512 8c2c9185270db288cf07eb8315adfa9e42f5979b44406fe314873641737eca22c24126de0bd4644137d1eaa49818ffa0e82d7c501b520b4dd9f9b656161a74bd
- SSDEEP 12288:ZvqSyJda/aulZAuYL901/gWxiEGwTS/3hRqLREtYb:dUJdaLbY+oGiiTSfKLREt
- TLSH T116D48B92F6408462E353283E867EB266E25DFEA167134287E7D01739DD903DBE5E430E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-06_6d76bed158c41e3ae27a6a8f4306760b_amadey_elex_ramnit_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-06_6d76bed158c41e3ae27a6a8f4306760b_amadey_elex_ramnit_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-06_6d76bed158c41e3ae27a6a8f4306760b_amadey_elex_ramnit_rhadamanthys_smoke-loader_stop
- Size 632KB
- SHA256 ed52883457f00237d90a60b018befae0c8f8f691d681d0e425d22db4f1e4bb22
- MD5 6d76bed158c41e3ae27a6a8f4306760b
- SHA1 3e0db545029695408d369d030d885430bb6ddea4
- SHA512 8c2c9185270db288cf07eb8315adfa9e42f5979b44406fe314873641737eca22c24126de0bd4644137d1eaa49818ffa0e82d7c501b520b4dd9f9b656161a74bd
- SSDEEP 12288:ZvqSyJda/aulZAuYL901/gWxiEGwTS/3hRqLREtYb:dUJdaLbY+oGiiTSfKLREt
- TLSH T116D48B92F6408462E353283E867EB266E25DFEA167134287E7D01739DD903DBE5E430E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
UPX dump on OEP (original entry point)
MITRE ATT&CK Enterprise v16
Privilege Escalation
Create or Modify System Process
1Windows Service
1Process Injection
1Defense Evasion
Impair Defenses
1Disable or Modify System Firewall
1Modify Registry
1Process Injection
1