General
- Target 2026-06-04_b40b4d599325b8fbb674daa7c2e5d3c0_amadey_elex_rhadamanthys_smoke-loader
- Size 71KB
- Sample260604-khm68abv4v
- SHA256 c6864b9c1746d2011f4fb6a87bc84619bccafb01e705f309eee70de2b23fa0a0
- MD5 b40b4d599325b8fbb674daa7c2e5d3c0
- SHA1 1feffa6655ef8423e230f5bc031e8e8c81276b48
- SHA512 023ec269148bdd989775a11b606a60cfe4d56a3c8a5a4bdc9fb57540d74fffc17b6c758f90a8bccf7c84193782a98502bdfb118ed376e38d4f72e2eb1c38f6c5
- SSDEEP 1536:eInCFRyAt5kFkUQ2lst+uhyY/tsPbaPfqnEs:eInCqAj+Q2lCEsGn
- TLSH T1CD63F7D9F7E480B1E132793484328ED3563B782E7E60419E27987638BE76BC18E75346
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-04_b40b4d599325b8fbb674daa7c2e5d3c0_amadey_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-04_b40b4d599325b8fbb674daa7c2e5d3c0_amadey_elex_rhadamanthys_smoke-loader.exe
Resource
win11-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-04_b40b4d599325b8fbb674daa7c2e5d3c0_amadey_elex_rhadamanthys_smoke-loader
- Size 71KB
- SHA256 c6864b9c1746d2011f4fb6a87bc84619bccafb01e705f309eee70de2b23fa0a0
- MD5 b40b4d599325b8fbb674daa7c2e5d3c0
- SHA1 1feffa6655ef8423e230f5bc031e8e8c81276b48
- SHA512 023ec269148bdd989775a11b606a60cfe4d56a3c8a5a4bdc9fb57540d74fffc17b6c758f90a8bccf7c84193782a98502bdfb118ed376e38d4f72e2eb1c38f6c5
- SSDEEP 1536:eInCFRyAt5kFkUQ2lst+uhyY/tsPbaPfqnEs:eInCqAj+Q2lCEsGn
- TLSH T1CD63F7D9F7E480B1E132793484328ED3563B782E7E60419E27987638BE76BC18E75346
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.