General
- Target 2026-07-01_1a8aa0e89336426d46c64f84ae922840_amadey_elex_remcos_rhadamanthys_smoke-loader
- Size 531KB
- Sample260701-vysrrabs5p
- SHA256 fb4783715750b4e2501877a6fd1606cf06d22af3dbdea804a1892e6624a2d05a
- MD5 1a8aa0e89336426d46c64f84ae922840
- SHA1 d2eb1da9b07881803a8404112a7bb9722fb680c2
- SHA512 86214f5737bddb84ecca4701ec25736c07732bc7e8c620832dd15e38e5f5c5aacb48a737b9dac7fe821e66d5ba6003a579ce8a5037d6a859afd363142546cbd4
- SSDEEP 12288:cdcAIffrC9fdm7naQ9W5m3fPw7N7fn5nPmR:cdpInm9fdmuQ9k63w7Rn5PmR
- TLSH T1A9C4F15075D2D1B2D08704331AAACBB22C7A39311B286DC776D4777DBE316C2A6B6327
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_1a8aa0e89336426d46c64f84ae922840_amadey_elex_remcos_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_1a8aa0e89336426d46c64f84ae922840_amadey_elex_remcos_rhadamanthys_smoke-loader.exe
Resource
win11ltsc2024-20260629-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_1a8aa0e89336426d46c64f84ae922840_amadey_elex_remcos_rhadamanthys_smoke-loader
- Size 531KB
- SHA256 fb4783715750b4e2501877a6fd1606cf06d22af3dbdea804a1892e6624a2d05a
- MD5 1a8aa0e89336426d46c64f84ae922840
- SHA1 d2eb1da9b07881803a8404112a7bb9722fb680c2
- SHA512 86214f5737bddb84ecca4701ec25736c07732bc7e8c620832dd15e38e5f5c5aacb48a737b9dac7fe821e66d5ba6003a579ce8a5037d6a859afd363142546cbd4
- SSDEEP 12288:cdcAIffrC9fdm7naQ9W5m3fPw7N7fn5nPmR:cdpInm9fdmuQ9k63w7Rn5PmR
- TLSH T1A9C4F15075D2D1B2D08704331AAACBB22C7A39311B286DC776D4777DBE316C2A6B6327
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Deletes itself
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.