General
-
Target
2025-04-04_a3bde46c08a015dd2233cd6382529a94_amadey_rhadamanthys_smoke-loader
-
Size
461KB
-
Sample
250404-gct6sstks8
-
MD5
a3bde46c08a015dd2233cd6382529a94
-
SHA1
f4bda18380c9a303ea136f5ac428bf0a7a5cac19
-
SHA256
44fe6735b6ef6689fc80576d802becc7683a699b1747619f3ff8e65fa7fadab7
-
SHA512
9e1f297623d53710c5e159f38a80353206bf6eb132592551cf09d5d9c3d48c3f58591af0f3aea79f014bb2c95eace91bb40866c6bd10c6770662f21e05e0898f
-
SSDEEP
6144:LEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpdFRdmu:LMpASIcWYx2U6hAJQnI
Malware Config
Extracted
urelas
218.54.31.165
218.54.31.226
Targets
-
-
Target
2025-04-04_a3bde46c08a015dd2233cd6382529a94_amadey_rhadamanthys_smoke-loader
-
Size
461KB
-
MD5
a3bde46c08a015dd2233cd6382529a94
-
SHA1
f4bda18380c9a303ea136f5ac428bf0a7a5cac19
-
SHA256
44fe6735b6ef6689fc80576d802becc7683a699b1747619f3ff8e65fa7fadab7
-
SHA512
9e1f297623d53710c5e159f38a80353206bf6eb132592551cf09d5d9c3d48c3f58591af0f3aea79f014bb2c95eace91bb40866c6bd10c6770662f21e05e0898f
-
SSDEEP
6144:LEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpdFRdmu:LMpASIcWYx2U6hAJQnI
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-