General
-
Target
2025-04-04_1c8db64c5096333fd8611b61772af10b_amadey_rhadamanthys_smoke-loader
-
Size
440KB
-
Sample
250404-f4ttnsz1az
-
MD5
1c8db64c5096333fd8611b61772af10b
-
SHA1
3626d7e04e9a22eb2f6777c6dde26e87bb1e694d
-
SHA256
def73dae6c799c93024d3379b1c3e13c9dae016c11727b7b5429db8835a2f2d6
-
SHA512
2a5c9b840a04ba440d62376b5f83a3a829780013a3e05fd18b561782b975cee81ace9cdbd98bc51a44f7be2910602dbbd754fb53e4f3e6b36d69a8c04971e344
-
SSDEEP
6144:oEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpjk:oMpASIcWYx2U6hAJQnP
Malware Config
Extracted
urelas
218.54.31.165
218.54.31.226
Targets
-
-
Target
2025-04-04_1c8db64c5096333fd8611b61772af10b_amadey_rhadamanthys_smoke-loader
-
Size
440KB
-
MD5
1c8db64c5096333fd8611b61772af10b
-
SHA1
3626d7e04e9a22eb2f6777c6dde26e87bb1e694d
-
SHA256
def73dae6c799c93024d3379b1c3e13c9dae016c11727b7b5429db8835a2f2d6
-
SHA512
2a5c9b840a04ba440d62376b5f83a3a829780013a3e05fd18b561782b975cee81ace9cdbd98bc51a44f7be2910602dbbd754fb53e4f3e6b36d69a8c04971e344
-
SSDEEP
6144:oEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpjk:oMpASIcWYx2U6hAJQnP
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-