General
- Target 2026-06-28_da1705d6a82526b8e68b8f508112b1d9_amadey_elex_rhadamanthys_smoke-loader
- Size 72KB
- Sample260628-xa9fpscs9p
- SHA256 4bb49375ec74f0494a75c7bec6597b4858852e4b5bbc13972f8e14eae666051e
- MD5 da1705d6a82526b8e68b8f508112b1d9
- SHA1 2bf9f9b347cd6bfa36dd6d5c9ac4c6241616fcca
- SHA512 3461dd91f5a44d6c85b726a49eb8eeb99d6a58105adbaa9e02318022c7a0fb873bf1af5c69e3ffab9c1416e3e6d08ac01b198b0b3f9386899eeebe42382d1fc4
- SSDEEP 1536:1ewZnxbj25f+rPfK5kOhubdspyXT5YXRtqcspaDw6x5f:IwBxbCB+D5bdsc5YXRnspIH
- TLSH T15D736D1373D1C8B3F273827048B9D6619667BC65A2B0418F378C662A5E723C18DFA75B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-28_da1705d6a82526b8e68b8f508112b1d9_amadey_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_da1705d6a82526b8e68b8f508112b1d9_amadey_elex_rhadamanthys_smoke-loader.exe
Resource
win11ltsc2024-20260618-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_da1705d6a82526b8e68b8f508112b1d9_amadey_elex_rhadamanthys_smoke-loader
- Size 72KB
- SHA256 4bb49375ec74f0494a75c7bec6597b4858852e4b5bbc13972f8e14eae666051e
- MD5 da1705d6a82526b8e68b8f508112b1d9
- SHA1 2bf9f9b347cd6bfa36dd6d5c9ac4c6241616fcca
- SHA512 3461dd91f5a44d6c85b726a49eb8eeb99d6a58105adbaa9e02318022c7a0fb873bf1af5c69e3ffab9c1416e3e6d08ac01b198b0b3f9386899eeebe42382d1fc4
- SSDEEP 1536:1ewZnxbj25f+rPfK5kOhubdspyXT5YXRtqcspaDw6x5f:IwBxbCB+D5bdsc5YXRnspIH
- TLSH T15D736D1373D1C8B3F273827048B9D6619667BC65A2B0418F378C662A5E723C18DFA75B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.