General
- Target 2026-10-23_1e1429e96ff89f9da4f50e146920e222_elex_rhadamanthys_stop
- Size 211KB
- Sample261023-rwaxdaev3r
- SHA256 049f474e12910b17cd58fb742ff2109b5d140028ea411f612c9bd065fb81ad81
- MD5 1e1429e96ff89f9da4f50e146920e222
- SHA1 e728751baa481417e5b5b6031aa8ae9761e422c6
- SHA512 718db25d41076d8ec1c55b6989c31d12c094a73513a00b220d2c5c00b0d7c0e1444d4d2bbfb581681c908b4cf887754e893a9ea0fda564bd2aef75bb680540ba
- SSDEEP 6144:MQKLJgY+5xv0O/AFXe1+VXfVRSP7EsI5/:CKYGvzIv1Hc9c
- TLSH T1C024BED4B770C072F5CA5E358809DAA05227ED30BA6085772667975EFF35EC0921E2B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-10-23_1e1429e96ff89f9da4f50e146920e222_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
2026-10-23_1e1429e96ff89f9da4f50e146920e222_elex_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260911-en
Malware Config
Extracted
-
smokeloader
-
2020
-
http://readinglistforaugust1.xyz/
-
http://readinglistforaugust2.xyz/
-
http://readinglistforaugust3.xyz/
-
http://readinglistforaugust4.xyz/
-
http://readinglistforaugust5.xyz/
-
http://readinglistforaugust6.xyz/
-
http://readinglistforaugust7.xyz/
-
http://readinglistforaugust8.xyz/
-
http://readinglistforaugust9.xyz/
-
http://readinglistforaugust10.xyz/
-
http://readinglistforaugust1.site/
-
http://readinglistforaugust2.site/
-
http://readinglistforaugust3.site/
-
http://readinglistforaugust4.site/
-
http://readinglistforaugust5.site/
-
http://readinglistforaugust6.site/
-
http://readinglistforaugust7.site/
-
http://readinglistforaugust8.site/
-
http://readinglistforaugust9.site/
-
http://readinglistforaugust10.site/
-
http://readinglistforaugust1.club/
-
http://readinglistforaugust2.club/
-
http://readinglistforaugust3.club/
-
http://readinglistforaugust4.club/
-
http://readinglistforaugust5.club/
-
http://readinglistforaugust6.club/
-
http://readinglistforaugust7.club/
-
http://readinglistforaugust8.club/
-
http://readinglistforaugust9.club/
-
http://readinglistforaugust10.club/
Targets
-
- Target 2026-10-23_1e1429e96ff89f9da4f50e146920e222_elex_rhadamanthys_stop
- Size 211KB
- SHA256 049f474e12910b17cd58fb742ff2109b5d140028ea411f612c9bd065fb81ad81
- MD5 1e1429e96ff89f9da4f50e146920e222
- SHA1 e728751baa481417e5b5b6031aa8ae9761e422c6
- SHA512 718db25d41076d8ec1c55b6989c31d12c094a73513a00b220d2c5c00b0d7c0e1444d4d2bbfb581681c908b4cf887754e893a9ea0fda564bd2aef75bb680540ba
- SSDEEP 6144:MQKLJgY+5xv0O/AFXe1+VXfVRSP7EsI5/:CKYGvzIv1Hc9c
- TLSH T1C024BED4B770C072F5CA5E358809DAA05227ED30BA6085772667975EFF35EC0921E2B3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Deletes itself
-
Suspicious use of SetThreadContext