General
-
Target
2025-04-02_2e9a9f1c407015f74526495af68dc7af_amadey_rhadamanthys_smoke-loader
-
Size
400KB
-
Sample
250402-wmss2stn15
-
MD5
2e9a9f1c407015f74526495af68dc7af
-
SHA1
482532090dbf3f7d3afe1c629f15819788ac650b
-
SHA256
5545361e116b880f0566820348884d476d1a49b7f3252f1ea3809cdf1507ac43
-
SHA512
a4e96f7c3033f703b23a6a5dd5f57f04a4222d5b6d1ed964a0c0b456b15c3ad44d3466d62fa472c89d44518cff4222ffd74189f924dbc89e56d2fddc14a5a8c0
-
SSDEEP
6144:85SXvBoDWoyLYyzbkPC4DYM6SB6v+qLnAzYmhwrxcvkzmSBrohq:8IfBoDWoyFblU6hAJQnOA
Malware Config
Extracted
urelas
218.54.31.165
218.54.31.226
Targets
-
-
Target
2025-04-02_2e9a9f1c407015f74526495af68dc7af_amadey_rhadamanthys_smoke-loader
-
Size
400KB
-
MD5
2e9a9f1c407015f74526495af68dc7af
-
SHA1
482532090dbf3f7d3afe1c629f15819788ac650b
-
SHA256
5545361e116b880f0566820348884d476d1a49b7f3252f1ea3809cdf1507ac43
-
SHA512
a4e96f7c3033f703b23a6a5dd5f57f04a4222d5b6d1ed964a0c0b456b15c3ad44d3466d62fa472c89d44518cff4222ffd74189f924dbc89e56d2fddc14a5a8c0
-
SSDEEP
6144:85SXvBoDWoyLYyzbkPC4DYM6SB6v+qLnAzYmhwrxcvkzmSBrohq:8IfBoDWoyFblU6hAJQnOA
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-