General
- Target 2026-07-01_22a243c773de1c6ebd9f09dcfb25b717_amadey_elex_remcos_rhadamanthys_smoke-loader
- Size 531KB
- Sample260701-pc8yysdv9k
- SHA256 e4b1e00ca9e0bbeac38223ae10e3ebe3f730ec9780887458f1d9ccb6a4628517
- MD5 22a243c773de1c6ebd9f09dcfb25b717
- SHA1 748521527e4f155abc663916a7f434b244e7a209
- SHA512 66af4b7cbfce5a1b1caa1511cf1458ed6fde31b8927499961ea4a0b4f92e5c96831dfe8bf4e11f2345dab86e86ddcebb184ac7d8dd25cfa2e304a91e86f3fa6e
- SSDEEP 12288:KdcAIffrC9fdm7naKlQMYduV1zxnbft7kFEN7fn5nPmR:KdpInm9fdmuetVLK2Rn5PmR
- TLSH T104C4F15166C2C1B2D09304332BABCBA22C7A79315B296DC772D0777D7E316C2AAB1357
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_22a243c773de1c6ebd9f09dcfb25b717_amadey_elex_remcos_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_22a243c773de1c6ebd9f09dcfb25b717_amadey_elex_remcos_rhadamanthys_smoke-loader.exe
Resource
win11ltsc2024-20260630-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_22a243c773de1c6ebd9f09dcfb25b717_amadey_elex_remcos_rhadamanthys_smoke-loader
- Size 531KB
- SHA256 e4b1e00ca9e0bbeac38223ae10e3ebe3f730ec9780887458f1d9ccb6a4628517
- MD5 22a243c773de1c6ebd9f09dcfb25b717
- SHA1 748521527e4f155abc663916a7f434b244e7a209
- SHA512 66af4b7cbfce5a1b1caa1511cf1458ed6fde31b8927499961ea4a0b4f92e5c96831dfe8bf4e11f2345dab86e86ddcebb184ac7d8dd25cfa2e304a91e86f3fa6e
- SSDEEP 12288:KdcAIffrC9fdm7naKlQMYduV1zxnbft7kFEN7fn5nPmR:KdpInm9fdmuetVLK2Rn5PmR
- TLSH T104C4F15166C2C1B2D09304332BABCBA22C7A79315B296DC772D0777D7E316C2AAB1357
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Deletes itself
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.