General
- Target 2026-07-14_fa9926e59b17736d917e9104656ea9a7_amadey_elex_remcos_rhadamanthys_smoke-loader
- Size 1.2MB
- Sample260714-rn3x7aev2k
- SHA256 1bcf0897bebe6237c2f344a395791531edccac166a1ebb5d85f053924ed58d1d
- MD5 fa9926e59b17736d917e9104656ea9a7
- SHA1 36fc0789f2d1db04d27bb41037da9c37c0bf0568
- SHA512 2003bbaaec0b18ee5aea3c376317c4c9ba5a20fc54f6668973df31d5c4fef43759015b13e5af3c5b6158284ea33dff379a18a9e58ccf69e7de182fa7a8732c00
- SSDEEP 24576:jf4zzkF9wQ4rMAtmQkI5ZS/nPKCIbg25dQEK24Ve/QQ:jh9wQ4rMMaI5ZMJlBETQQ
- TLSH T1D945F1D37E4452F6D6E908B315AE8D917A357E365B6228A371C8332F88B30D35729B13
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_fa9926e59b17736d917e9104656ea9a7_amadey_elex_remcos_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_fa9926e59b17736d917e9104656ea9a7_amadey_elex_remcos_rhadamanthys_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_fa9926e59b17736d917e9104656ea9a7_amadey_elex_remcos_rhadamanthys_smoke-loader
- Size 1.2MB
- SHA256 1bcf0897bebe6237c2f344a395791531edccac166a1ebb5d85f053924ed58d1d
- MD5 fa9926e59b17736d917e9104656ea9a7
- SHA1 36fc0789f2d1db04d27bb41037da9c37c0bf0568
- SHA512 2003bbaaec0b18ee5aea3c376317c4c9ba5a20fc54f6668973df31d5c4fef43759015b13e5af3c5b6158284ea33dff379a18a9e58ccf69e7de182fa7a8732c00
- SSDEEP 24576:jf4zzkF9wQ4rMAtmQkI5ZS/nPKCIbg25dQEK24Ve/QQ:jh9wQ4rMMaI5ZMJlBETQQ
- TLSH T1D945F1D37E4452F6D6E908B315AE8D917A357E365B6228A371C8332F88B30D35729B13
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE