General
-
Target
2025-04-04_3444aad7609b0c9c41c39deafa16fab6_amadey_rhadamanthys_smoke-loader
-
Size
461KB
-
Sample
250404-f5t6tssrz9
-
MD5
3444aad7609b0c9c41c39deafa16fab6
-
SHA1
a41ae6e5268dad024d5217ce5cd0e1cbcd3e813e
-
SHA256
eebdf5175db16b6691617037b074bf33ce4df24c009ca44097c0e9c793a72326
-
SHA512
2728149fa608970cde0627ed988d14b3c50c8335dff12852419517ffce179789aeaa432e92cf3d56030699f5c3d24cf3d587b32a1e0c8e681b1eb95a3efea627
-
SSDEEP
6144:LEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpdFRdmH:LMpASIcWYx2U6hAJQnh
Malware Config
Extracted
urelas
218.54.31.165
218.54.31.226
Targets
-
-
Target
2025-04-04_3444aad7609b0c9c41c39deafa16fab6_amadey_rhadamanthys_smoke-loader
-
Size
461KB
-
MD5
3444aad7609b0c9c41c39deafa16fab6
-
SHA1
a41ae6e5268dad024d5217ce5cd0e1cbcd3e813e
-
SHA256
eebdf5175db16b6691617037b074bf33ce4df24c009ca44097c0e9c793a72326
-
SHA512
2728149fa608970cde0627ed988d14b3c50c8335dff12852419517ffce179789aeaa432e92cf3d56030699f5c3d24cf3d587b32a1e0c8e681b1eb95a3efea627
-
SSDEEP
6144:LEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpdFRdmH:LMpASIcWYx2U6hAJQnh
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-