General
- Target 2026-07-07_8f9b4684c0119db17dfc1a4e8bd463ab_amadey_elex_rhadamanthys_smoke-loader
- Size 2.0MB
- Sample260707-jcpmeshx4p
- SHA256 a9f2cc704de07e5d05d4b8334bd63f3171310969ad0c8d305baca55272844d53
- MD5 8f9b4684c0119db17dfc1a4e8bd463ab
- SHA1 546bf4d1fe2c6825c70622f0cb7771e06a8bb0cd
- SHA512 ffad0e6d3b6b12cecc2f48251c0f3bbbeb9a08de17a21bdec5eadf3beac2fb11cc23aa19122da378b92cc833dc13b33eabceec36da71805590afb403fd62216d
- SSDEEP 49152:r+CQS88KQUnnhs3Y94Y4H3nGKXKGF43DYyhIDxg1eBQjGBsy+z:6S8jQIq3Y74WXjDnIOABady
- TLSH T11EA589D6957149E6C41730F2D61686BF2C372F3B1612BB83A2B9AEDD39212D27731342
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-07_8f9b4684c0119db17dfc1a4e8bd463ab_amadey_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_8f9b4684c0119db17dfc1a4e8bd463ab_amadey_elex_rhadamanthys_smoke-loader.exe
Resource
win11ltsc2024-20260706-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_8f9b4684c0119db17dfc1a4e8bd463ab_amadey_elex_rhadamanthys_smoke-loader
- Size 2.0MB
- SHA256 a9f2cc704de07e5d05d4b8334bd63f3171310969ad0c8d305baca55272844d53
- MD5 8f9b4684c0119db17dfc1a4e8bd463ab
- SHA1 546bf4d1fe2c6825c70622f0cb7771e06a8bb0cd
- SHA512 ffad0e6d3b6b12cecc2f48251c0f3bbbeb9a08de17a21bdec5eadf3beac2fb11cc23aa19122da378b92cc833dc13b33eabceec36da71805590afb403fd62216d
- SSDEEP 49152:r+CQS88KQUnnhs3Y94Y4H3nGKXKGF43DYyhIDxg1eBQjGBsy+z:6S8jQIq3Y74WXjDnIOABady
- TLSH T11EA589D6957149E6C41730F2D61686BF2C372F3B1612BB83A2B9AEDD39212D27731342
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE