General
-
Target
2025-04-04_05b66e0338a21adaafe696ea30df8813_amadey_rhadamanthys_smoke-loader
-
Size
440KB
-
Sample
250404-fgljsazxds
-
MD5
05b66e0338a21adaafe696ea30df8813
-
SHA1
3d1727a3c91b5390da7316d5ae598be72a0c0687
-
SHA256
95126a1672128dad1a603d5ecb315ce86d660d5935e0651773bec7a40d238b01
-
SHA512
92c40dea22407ddc660db1d82ad87bdac2695f315092c67f83cdb9286224ac66d017dca3a11b7d4dec4f5abe8119d04fa27a02798af4c7819eed8585e7ff55c7
-
SSDEEP
6144:oEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpj2:oMpASIcWYx2U6hAJQnP
Malware Config
Extracted
urelas
218.54.31.165
218.54.31.226
Targets
-
-
Target
2025-04-04_05b66e0338a21adaafe696ea30df8813_amadey_rhadamanthys_smoke-loader
-
Size
440KB
-
MD5
05b66e0338a21adaafe696ea30df8813
-
SHA1
3d1727a3c91b5390da7316d5ae598be72a0c0687
-
SHA256
95126a1672128dad1a603d5ecb315ce86d660d5935e0651773bec7a40d238b01
-
SHA512
92c40dea22407ddc660db1d82ad87bdac2695f315092c67f83cdb9286224ac66d017dca3a11b7d4dec4f5abe8119d04fa27a02798af4c7819eed8585e7ff55c7
-
SSDEEP
6144:oEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpj2:oMpASIcWYx2U6hAJQnP
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-