General
- Target 2026-07-18_1b1faf2d6e991e1519cb38f29fb05615_amadey_elex_remcos_rhadamanthys_smoke-loader
- Size 756KB
- Sample260718-klrzksht91
- SHA256 91272e490f56296c4faf2047677bbc69c047267763ab1400026e5f3a18c30a09
- MD5 1b1faf2d6e991e1519cb38f29fb05615
- SHA1 f7c307fbb2b829b7f8c761513469156ef629befa
- SHA512 42dd7cf865c3a0b0f573076bb170f030a3b3f30660e06d53e3eadf20b58e1688a2608198e18af9e10079d00970dddbc9fe0dafe66841e52bc0682e6c99f7b358
- SSDEEP 12288:4fNzTW2Qz9H4vROWO8SnUvAqc5/DSvMFeAvL4t26vnmBUd6whYbcE1oTkVLBhaKS:4fhw9H4vROWO8Snj91Dhdj6vnPhYQE1Q
- TLSH T13BF4E161A48081B2D5D668324C6A86510D763E3317E6AEC332D43B593D73DC2AB357EF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_1b1faf2d6e991e1519cb38f29fb05615_amadey_elex_remcos_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_1b1faf2d6e991e1519cb38f29fb05615_amadey_elex_remcos_rhadamanthys_smoke-loader.exe
Resource
win11ltsc2024-20260710-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_1b1faf2d6e991e1519cb38f29fb05615_amadey_elex_remcos_rhadamanthys_smoke-loader
- Size 756KB
- SHA256 91272e490f56296c4faf2047677bbc69c047267763ab1400026e5f3a18c30a09
- MD5 1b1faf2d6e991e1519cb38f29fb05615
- SHA1 f7c307fbb2b829b7f8c761513469156ef629befa
- SHA512 42dd7cf865c3a0b0f573076bb170f030a3b3f30660e06d53e3eadf20b58e1688a2608198e18af9e10079d00970dddbc9fe0dafe66841e52bc0682e6c99f7b358
- SSDEEP 12288:4fNzTW2Qz9H4vROWO8SnUvAqc5/DSvMFeAvL4t26vnmBUd6whYbcE1oTkVLBhaKS:4fhw9H4vROWO8Snj91Dhdj6vnPhYQE1Q
- TLSH T13BF4E161A48081B2D5D668324C6A86510D763E3317E6AEC332D43B593D73DC2AB357EF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE