General
-
Target
2025-04-04_1f01035c9416593a37ef082c83ee4bbc_amadey_rhadamanthys_smoke-loader
-
Size
461KB
-
Sample
250404-f9k4qatjw4
-
MD5
1f01035c9416593a37ef082c83ee4bbc
-
SHA1
4066b194b99c52dad1a54367a1b2c7d761e467f3
-
SHA256
b60e72880976381a40581a44490c9f907fb4ef75bc8527a36697f20b6d719164
-
SHA512
f48e6c1f50c8118e0c9a5ced92ebcac54baf191554fe325a4bb84b0d898ee478c09c147e1b4fa63831a1608bbcf0acfdffe3a4c09ed2001c139852a4d9668384
-
SSDEEP
6144:LEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpdFRdm7:LMpASIcWYx2U6hAJQnV
Malware Config
Extracted
urelas
218.54.31.165
218.54.31.226
Targets
-
-
Target
2025-04-04_1f01035c9416593a37ef082c83ee4bbc_amadey_rhadamanthys_smoke-loader
-
Size
461KB
-
MD5
1f01035c9416593a37ef082c83ee4bbc
-
SHA1
4066b194b99c52dad1a54367a1b2c7d761e467f3
-
SHA256
b60e72880976381a40581a44490c9f907fb4ef75bc8527a36697f20b6d719164
-
SHA512
f48e6c1f50c8118e0c9a5ced92ebcac54baf191554fe325a4bb84b0d898ee478c09c147e1b4fa63831a1608bbcf0acfdffe3a4c09ed2001c139852a4d9668384
-
SSDEEP
6144:LEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpdFRdm7:LMpASIcWYx2U6hAJQnV
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-