General
- Target 2026-11-12_3ccbd2170eb88a1462888ee60df1766e_elex_rhadamanthys_smoke-loader_stop_zeus
- Size 288KB
- Sample261113-flexssgs9m
- SHA256 35c81aa9b0395070906eb7fee83cdc6d8345dee5788807c2d1ee310acc00a47f
- MD5 3ccbd2170eb88a1462888ee60df1766e
- SHA1 e2b3d1b2aa43b03891abf699263b9acb68badd91
- SHA512 bf0ad2cf07336d2dbe6d7257c56362d594dbad52d326a2b29366d5ac2e8b1d90ca6da9cd3ee626ba8422707efe197ce2999b3ccb8fd14b124ad4a50ab3c69263
- SSDEEP 6144:bLiuv8j7ZuA5ErOOze1QXh0jfLwhkLX3fgZXVK7iR0:Hi1x55UIEhlCXvkXVg80
- TLSH T1CF54AD22F5E94036E4B2017E05D8A67306BE7D739B62CD5E1BCE0B890BF4991D325B72
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-12_3ccbd2170eb88a1462888ee60df1766e_elex_rhadamanthys_smoke-loader_stop_zeus.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-12_3ccbd2170eb88a1462888ee60df1766e_elex_rhadamanthys_smoke-loader_stop_zeus.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-12_3ccbd2170eb88a1462888ee60df1766e_elex_rhadamanthys_smoke-loader_stop_zeus
- Size 288KB
- SHA256 35c81aa9b0395070906eb7fee83cdc6d8345dee5788807c2d1ee310acc00a47f
- MD5 3ccbd2170eb88a1462888ee60df1766e
- SHA1 e2b3d1b2aa43b03891abf699263b9acb68badd91
- SHA512 bf0ad2cf07336d2dbe6d7257c56362d594dbad52d326a2b29366d5ac2e8b1d90ca6da9cd3ee626ba8422707efe197ce2999b3ccb8fd14b124ad4a50ab3c69263
- SSDEEP 6144:bLiuv8j7ZuA5ErOOze1QXh0jfLwhkLX3fgZXVK7iR0:Hi1x55UIEhlCXvkXVg80
- TLSH T1CF54AD22F5E94036E4B2017E05D8A67306BE7D739B62CD5E1BCE0B890BF4991D325B72
- MD5 SHA1 SHA512 SSDEEP TLSH
Detects Gepys trojan
Event Triggered Execution: AppInit DLLs
Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
Executes dropped EXE
Loads dropped DLL