General
-
Target
2025-04-04_77394804b0f67cc3d22d4211ed753cec_amadey_rhadamanthys_smoke-loader
-
Size
440KB
-
Sample
250404-f5m3hsz1cy
-
MD5
77394804b0f67cc3d22d4211ed753cec
-
SHA1
081176b33409e53f0440bb678525ae72dfa5396e
-
SHA256
7427a399fa439c45ddfd99875c31c814f180840c62ab5cf6d1985f0af91cc0b4
-
SHA512
350aa49f5255abb3369ecf1a89709c53151a311237b6d3a8d3677085dab41ffa437d51b6791854bc88353c3a61bd3a81d3ef4dd56bd77df86bb9b76e904263a5
-
SSDEEP
6144:oEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpj1:oMpASIcWYx2U6hAJQny
Malware Config
Extracted
urelas
218.54.31.165
218.54.31.226
Targets
-
-
Target
2025-04-04_77394804b0f67cc3d22d4211ed753cec_amadey_rhadamanthys_smoke-loader
-
Size
440KB
-
MD5
77394804b0f67cc3d22d4211ed753cec
-
SHA1
081176b33409e53f0440bb678525ae72dfa5396e
-
SHA256
7427a399fa439c45ddfd99875c31c814f180840c62ab5cf6d1985f0af91cc0b4
-
SHA512
350aa49f5255abb3369ecf1a89709c53151a311237b6d3a8d3677085dab41ffa437d51b6791854bc88353c3a61bd3a81d3ef4dd56bd77df86bb9b76e904263a5
-
SSDEEP
6144:oEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpj1:oMpASIcWYx2U6hAJQny
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-