General
- Target 2026-06-03_ba9c617d8cd304b7c4e378c1648a83b4_amadey_elex_remcos_rhadamanthys_smoke-loader
- Size 808KB
- Sample260603-c8b8msav8n
- SHA256 d4173aad3aa11459c2a0c351ddb464462f6ad297b2d4c6b54c39a6abea860f2d
- MD5 ba9c617d8cd304b7c4e378c1648a83b4
- SHA1 2d996f24465bc71e0e4eeadfb6d1bfaf996c3c4a
- SHA512 2a24e471bcbd6213ec2d5d85510450aeb2104051e04953662a931c2d97c2079f81213286084f585ae91d86065de72c7eecc0c76a2cc9174898197ed92a7530c7
- SSDEEP 24576:cfRxrn39tfNuzXTGThNRuc+Riyty5f8ZLZmP:cTr39tfNuzXKhmcqty5yZmP
- TLSH T10205F111B94081B2D1D629324D6A97911DB63E764BEA7DC332C83B293C32DC1A7357AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-03_ba9c617d8cd304b7c4e378c1648a83b4_amadey_elex_remcos_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-03_ba9c617d8cd304b7c4e378c1648a83b4_amadey_elex_remcos_rhadamanthys_smoke-loader.exe
Resource
win11-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-03_ba9c617d8cd304b7c4e378c1648a83b4_amadey_elex_remcos_rhadamanthys_smoke-loader
- Size 808KB
- SHA256 d4173aad3aa11459c2a0c351ddb464462f6ad297b2d4c6b54c39a6abea860f2d
- MD5 ba9c617d8cd304b7c4e378c1648a83b4
- SHA1 2d996f24465bc71e0e4eeadfb6d1bfaf996c3c4a
- SHA512 2a24e471bcbd6213ec2d5d85510450aeb2104051e04953662a931c2d97c2079f81213286084f585ae91d86065de72c7eecc0c76a2cc9174898197ed92a7530c7
- SSDEEP 24576:cfRxrn39tfNuzXTGThNRuc+Riyty5f8ZLZmP:cTr39tfNuzXKhmcqty5yZmP
- TLSH T10205F111B94081B2D1D629324D6A97911DB63E764BEA7DC332C83B293C32DC1A7357AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE