General
- Target 2026-05-11_1ff4b4aae8def2a5230e9b4e931939a0_amadey_elex_karagany_rhadamanthys_smoke-loader_tofsee
- Size 383KB
- Sample260511-bfdekact6q
- SHA256 488c0f875a2227d2c26dd9c1cc9156991c852117dbe5920001eecc6d684135cb
- MD5 1ff4b4aae8def2a5230e9b4e931939a0
- SHA1 24490a574f3628d30d5f94cd8ca638ab3d242c1b
- SHA512 6d6654378513234b95f972be4f7ebe974db82683e4903f11ad5570d768bee38914b7f393896d756bb9d39e91c4c91271121a9e61584b4faffc405439993c9d6a
- SSDEEP 6144:Rsa1jZVgy03se0kX1bewB1TY8BcA18rhyzypLZhF5D/e1M8p/dbO:3tVgyusetedUfzeLl5DmMqbO
- TLSH T16D84BE2172408039F3690B3149A5E6F5186DAD3927A4E98FF7783E3A2E711C3567728F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-05-11_1ff4b4aae8def2a5230e9b4e931939a0_amadey_elex_karagany_rhadamanthys_smoke-loader_tofsee.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
1.234.83.146
-
133.242.129.155
-
218.54.31.165
-
218.54.31.226
Targets
-
- Target 2026-05-11_1ff4b4aae8def2a5230e9b4e931939a0_amadey_elex_karagany_rhadamanthys_smoke-loader_tofsee
- Size 383KB
- SHA256 488c0f875a2227d2c26dd9c1cc9156991c852117dbe5920001eecc6d684135cb
- MD5 1ff4b4aae8def2a5230e9b4e931939a0
- SHA1 24490a574f3628d30d5f94cd8ca638ab3d242c1b
- SHA512 6d6654378513234b95f972be4f7ebe974db82683e4903f11ad5570d768bee38914b7f393896d756bb9d39e91c4c91271121a9e61584b4faffc405439993c9d6a
- SSDEEP 6144:Rsa1jZVgy03se0kX1bewB1TY8BcA18rhyzypLZhF5D/e1M8p/dbO:3tVgyusetedUfzeLl5DmMqbO
- TLSH T16D84BE2172408039F3690B3149A5E6F5186DAD3927A4E98FF7783E3A2E711C3567728F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE