General
- Target 2026-06-26_ff734a0f481e179f0ac3c4879b0a8d14_amadey_elex_rhadamanthys_smoke-loader
- Size 108KB
- Sample260629-mtb97sa14y
- SHA256 5ef3a0e65f734d9c7a97d7b70b4b00c1f473bb8fe082a35026bd68602101fc12
- MD5 ff734a0f481e179f0ac3c4879b0a8d14
- SHA1 00f852387866640cd5628d3312fd54169fc753a6
- SHA512 9a8abddfc7ad8f84198ccc59a9d7d3133b4cff2443637c0dd5446387723cdc8069e7b0858880a0fc41bc2b113507aa06c49245bd6f012b16145156712782d857
- SSDEEP 1536:ayNStPY+z0mHk9DcEPQfkdWbh8UH9SZ47Qn/uGK05J:olY+ziDcEPePH9SZ4uuGH
- TLSH T1F5B31895F7D882B1F9B3A53098F165839937BC26BD308C4E118922191EB37825EF1B5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-06-26_ff734a0f481e179f0ac3c4879b0a8d14_amadey_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-26_ff734a0f481e179f0ac3c4879b0a8d14_amadey_elex_rhadamanthys_smoke-loader.exe
Resource
win11ltsc2024-20260617-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-26_ff734a0f481e179f0ac3c4879b0a8d14_amadey_elex_rhadamanthys_smoke-loader
- Size 108KB
- SHA256 5ef3a0e65f734d9c7a97d7b70b4b00c1f473bb8fe082a35026bd68602101fc12
- MD5 ff734a0f481e179f0ac3c4879b0a8d14
- SHA1 00f852387866640cd5628d3312fd54169fc753a6
- SHA512 9a8abddfc7ad8f84198ccc59a9d7d3133b4cff2443637c0dd5446387723cdc8069e7b0858880a0fc41bc2b113507aa06c49245bd6f012b16145156712782d857
- SSDEEP 1536:ayNStPY+z0mHk9DcEPQfkdWbh8UH9SZ47Qn/uGK05J:olY+ziDcEPePH9SZ4uuGH
- TLSH T1F5B31895F7D882B1F9B3A53098F165839937BC26BD308C4E118922191EB37825EF1B5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables built or packed with MPress PE compressor
-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.