General
- Target 2026-06-09_b67c3212d2eb83f0c23d2eb10a7a9a64_amadey_elex_rhadamanthys_smoke-loader_stop
- Size 503KB
- Sample260609-2k66jsbt2m
- SHA256 237a2e40201c093fdcca7451a43fab5df30aba671530def7ea0c3dd7874fa694
- MD5 b67c3212d2eb83f0c23d2eb10a7a9a64
- SHA1 b2207f21a877286030dda361c00da4388ad90fcc
- SHA512 b2a96ea5063f702b34ae151973a9612d7403c3aefce2cd67a080e4c1dbe4e187158268e3b645ed35cc02c2fabc36f10a4efd99b36392fd91fa1313936eae18e5
- SSDEEP 12288:fwYFQQG8SdrNa4gFK0IqXOFumphcKTpaxZ:f0ZdBdt0ZYD3cKTpk
- TLSH T131B4C0213690C435E3A613764996E6F419997E345AA0D28FF7B83E799F301C39A3324F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-06-09_b67c3212d2eb83f0c23d2eb10a7a9a64_amadey_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
1.234.83.146
-
133.242.129.155
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-06-09_b67c3212d2eb83f0c23d2eb10a7a9a64_amadey_elex_rhadamanthys_smoke-loader_stop
- Size 503KB
- SHA256 237a2e40201c093fdcca7451a43fab5df30aba671530def7ea0c3dd7874fa694
- MD5 b67c3212d2eb83f0c23d2eb10a7a9a64
- SHA1 b2207f21a877286030dda361c00da4388ad90fcc
- SHA512 b2a96ea5063f702b34ae151973a9612d7403c3aefce2cd67a080e4c1dbe4e187158268e3b645ed35cc02c2fabc36f10a4efd99b36392fd91fa1313936eae18e5
- SSDEEP 12288:fwYFQQG8SdrNa4gFK0IqXOFumphcKTpaxZ:f0ZdBdt0ZYD3cKTpk
- TLSH T131B4C0213690C435E3A613764996E6F419997E345AA0D28FF7B83E799F301C39A3324F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE