General
- Target 2026-10-26_9a46ccc18ed7d86af61b88a5bcdfeb0d_amadey_elex_rhadamanthys_smoke-loader_stop
- Size 1.3MB
- Sample261027-m545csz19p
- SHA256 bc25e3d1b83a54904f13f2b495020fd33697dc7419294e05be97ffbed111f062
- MD5 9a46ccc18ed7d86af61b88a5bcdfeb0d
- SHA1 65ddfdb45a9cefbfe03f1d13d43c20fd8fcee837
- SHA512 fc7ae1120c664a1f5a0a071b89d7a64e21e0157af9948275e45b6e652eaad413735cb35b1216c6b7fefab01b6a3d7b6466c6e183e5e965b5a1d6302d7e9e85d5
- SSDEEP 24576:GwfLrvi4cRIyDe3SUNaXy+WypoGHFnAUz5DFs1jsLqmVNPEZ+OQw:l+i3DsX1WHGtDU42mLsZFQw
- TLSH T13A5512003195CC77E0EB35B78431C6746AB5BE816E0A286B7FC4776FE2770A2EA71215
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-26_9a46ccc18ed7d86af61b88a5bcdfeb0d_amadey_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-26_9a46ccc18ed7d86af61b88a5bcdfeb0d_amadey_elex_rhadamanthys_smoke-loader_stop
- Size 1.3MB
- SHA256 bc25e3d1b83a54904f13f2b495020fd33697dc7419294e05be97ffbed111f062
- MD5 9a46ccc18ed7d86af61b88a5bcdfeb0d
- SHA1 65ddfdb45a9cefbfe03f1d13d43c20fd8fcee837
- SHA512 fc7ae1120c664a1f5a0a071b89d7a64e21e0157af9948275e45b6e652eaad413735cb35b1216c6b7fefab01b6a3d7b6466c6e183e5e965b5a1d6302d7e9e85d5
- SSDEEP 24576:GwfLrvi4cRIyDe3SUNaXy+WypoGHFnAUz5DFs1jsLqmVNPEZ+OQw:l+i3DsX1WHGtDU42mLsZFQw
- TLSH T13A5512003195CC77E0EB35B78431C6746AB5BE816E0A286B7FC4776FE2770A2EA71215
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1