General
- Target 2026-05-06_104e15e715bace0b3a2ce2593a2edddd_amadey_elex_remcos_rhadamanthys_stop
- Size 7.1MB
- Sample260506-kd8blady6x
- SHA256 312b6869ab1b358fe67ead2583c35f47569d41bd0f22e5424777ede2899f82ae
- MD5 104e15e715bace0b3a2ce2593a2edddd
- SHA1 ab44d5a98030e1bcc200f93cc454b87ed80e7005
- SHA512 017eff2788666099142c3c1ec437a838f7d8abba945b714da8150b38c780cadb6280401d2d6a2cd492a522e0724f8ead763e9c2e30a866f64f368516dd262246
- SSDEEP 196608:yfuJfAx83B5XBZRv99jYimOBKPL2QWFpMie28xFmlWYx:y2JfAazZ1RmDPL2TjdflWYx
- TLSH T168763365FBE5D0F5C0932B392046D72AD977A112DF26978B37A00A78DD21A912F3730E
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-06_104e15e715bace0b3a2ce2593a2edddd_amadey_elex_remcos_rhadamanthys_stop.exe
Resource
win10v2004-20260130-en
19 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-06_104e15e715bace0b3a2ce2593a2edddd_amadey_elex_remcos_rhadamanthys_stop
- Size 7.1MB
- SHA256 312b6869ab1b358fe67ead2583c35f47569d41bd0f22e5424777ede2899f82ae
- MD5 104e15e715bace0b3a2ce2593a2edddd
- SHA1 ab44d5a98030e1bcc200f93cc454b87ed80e7005
- SHA512 017eff2788666099142c3c1ec437a838f7d8abba945b714da8150b38c780cadb6280401d2d6a2cd492a522e0724f8ead763e9c2e30a866f64f368516dd262246
- SSDEEP 196608:yfuJfAx83B5XBZRv99jYimOBKPL2QWFpMie28xFmlWYx:y2JfAazZ1RmDPL2TjdflWYx
- TLSH T168763365FBE5D0F5C0932B392046D72AD977A112DF26978B37A00A78DD21A912F3730E
- MD5 SHA1 SHA512 SSDEEP TLSH
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Drops desktop.ini file(s)