General
- Target 2026-10-28_56a9fad97c5ca4ca583353bbb4b355bc_amadey_elex_rhadamanthys_smoke-loader_stop
- Size 368KB
- Sample261030-evzswswt5k
- SHA256 edc5bf2f6a491e25384e0d20998fb4a8a8139b983958ffde0ef33ef714c20d89
- MD5 56a9fad97c5ca4ca583353bbb4b355bc
- SHA1 826c4aa70ea8730731e6e18c0585765f41a2bd88
- SHA512 b17e0f4254a9884be443bc708c52c9e0ca75a707f006705d86d4f702e990dc4a10fe9ae98ac60b9db9af4369c36b10445dfd3002fc80831c0e39a374469447da
- SSDEEP 6144:s+xbrqwifQDmSAmTTIJ9YY10Abb/Sr2Txj72zltNla40Oq:sM3HprNTTA1dbDRXQQ
- TLSH T16784D02636D2C936E11AC87D0C05D49D561EBC842FBA2BE377D87F8B4A732C74A35681
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-28_56a9fad97c5ca4ca583353bbb4b355bc_amadey_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-28_56a9fad97c5ca4ca583353bbb4b355bc_amadey_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260911-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-28_56a9fad97c5ca4ca583353bbb4b355bc_amadey_elex_rhadamanthys_smoke-loader_stop
- Size 368KB
- SHA256 edc5bf2f6a491e25384e0d20998fb4a8a8139b983958ffde0ef33ef714c20d89
- MD5 56a9fad97c5ca4ca583353bbb4b355bc
- SHA1 826c4aa70ea8730731e6e18c0585765f41a2bd88
- SHA512 b17e0f4254a9884be443bc708c52c9e0ca75a707f006705d86d4f702e990dc4a10fe9ae98ac60b9db9af4369c36b10445dfd3002fc80831c0e39a374469447da
- SSDEEP 6144:s+xbrqwifQDmSAmTTIJ9YY10Abb/Sr2Txj72zltNla40Oq:sM3HprNTTA1dbDRXQQ
- TLSH T16784D02636D2C936E11AC87D0C05D49D561EBC842FBA2BE377D87F8B4A732C74A35681
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with aPLib.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Adds Run key to start application
-
Checks for any installed AV software in registry
-
Suspicious use of SetThreadContext
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1