General
- Target 2026-06-28_74f0b2a8c7fee1a2863b32901d6ba21a_amadey_elex_rhadamanthys_smoke-loader
- Size 70KB
- Sample260628-1g42caft9p
- SHA256 2cf20db70decfcd7503d2eabfc942de266faf942d24eb279600649b527dcfe6c
- MD5 74f0b2a8c7fee1a2863b32901d6ba21a
- SHA1 02d0d73ca5555ffc06acfff0406bff34d6b4a6f9
- SHA512 50338566a8a632b7d62e11b5390a57075a3e600142a8fabbac568e19f9ad300fcfc3efb064b6040e765ae7bf9889ff2009a9912222c3c8a99cd3dcd938e93196
- SSDEEP 1536:0SSrqKSAK53/OIzhx5kPahlSdmczOhmglEsNmjhaNbZODxQY:0SS4AsPOIzxSdmaOhmbsNmjhis
- TLSH T155634B02B3D0C4B3F573423448B9D5615A6BBC16A7B0458F3A8C726A6E717C25DFA31B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-28_74f0b2a8c7fee1a2863b32901d6ba21a_amadey_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_74f0b2a8c7fee1a2863b32901d6ba21a_amadey_elex_rhadamanthys_smoke-loader.exe
Resource
win11ltsc2024-20260618-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_74f0b2a8c7fee1a2863b32901d6ba21a_amadey_elex_rhadamanthys_smoke-loader
- Size 70KB
- SHA256 2cf20db70decfcd7503d2eabfc942de266faf942d24eb279600649b527dcfe6c
- MD5 74f0b2a8c7fee1a2863b32901d6ba21a
- SHA1 02d0d73ca5555ffc06acfff0406bff34d6b4a6f9
- SHA512 50338566a8a632b7d62e11b5390a57075a3e600142a8fabbac568e19f9ad300fcfc3efb064b6040e765ae7bf9889ff2009a9912222c3c8a99cd3dcd938e93196
- SSDEEP 1536:0SSrqKSAK53/OIzhx5kPahlSdmczOhmglEsNmjhaNbZODxQY:0SS4AsPOIzxSdmaOhmbsNmjhis
- TLSH T155634B02B3D0C4B3F573423448B9D5615A6BBC16A7B0458F3A8C726A6E717C25DFA31B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.