General
- Target 2026-06-27_73c74fa930a8420adfb8d8df28891ca2_amadey_elex_remcos_rhadamanthys_smoke-loader
- Size 932KB
- Sample260629-gt99caev7t
- SHA256 7a6c8500fa0912481fa1e485eaa2082845f5dd37f3ec6a69df27230916286c97
- MD5 73c74fa930a8420adfb8d8df28891ca2
- SHA1 01a759ea381f74f0cf100f6a27da071a4c36302f
- SHA512 765b7ddee9b3361de24220cd081dc84038a5f7119fdfb528476a0894a40ff5437d85bfb8f88fc0a0c301c4328674184a55d83ca2d9f38409cfe783c00d1689e2
- SSDEEP 24576:1fxg9WbdROWOT8ZGMpEBFkPk78vOPtssh9LZm+UZm:1pg9b8ZGMpEBF78vQ+qZmRZm
- TLSH T1CD15D052E98041B6D1DA68325CBA86110DB23E6756EABEC321C43B453C37D82E7357EF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_73c74fa930a8420adfb8d8df28891ca2_amadey_elex_remcos_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_73c74fa930a8420adfb8d8df28891ca2_amadey_elex_remcos_rhadamanthys_smoke-loader.exe
Resource
win11ltsc2024-20260618-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_73c74fa930a8420adfb8d8df28891ca2_amadey_elex_remcos_rhadamanthys_smoke-loader
- Size 932KB
- SHA256 7a6c8500fa0912481fa1e485eaa2082845f5dd37f3ec6a69df27230916286c97
- MD5 73c74fa930a8420adfb8d8df28891ca2
- SHA1 01a759ea381f74f0cf100f6a27da071a4c36302f
- SHA512 765b7ddee9b3361de24220cd081dc84038a5f7119fdfb528476a0894a40ff5437d85bfb8f88fc0a0c301c4328674184a55d83ca2d9f38409cfe783c00d1689e2
- SSDEEP 24576:1fxg9WbdROWOT8ZGMpEBFkPk78vOPtssh9LZm+UZm:1pg9b8ZGMpEBF78vQ+qZmRZm
- TLSH T1CD15D052E98041B6D1DA68325CBA86110DB23E6756EABEC321C43B453C37D82E7357EF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE