General
- Target 2026-07-20_112d8d2c492dbb2da8a9ad1a9910bace_amadey_elex_rhadamanthys_smoke-loader_stop_urelas
- Size 426KB
- Sample260720-mkdfxaht9v
- SHA256 1630ddad002776a81654733f8b0fc15cbaf8ff56f867f25b04da1c62d1e2a3ce
- MD5 112d8d2c492dbb2da8a9ad1a9910bace
- SHA1 fc1b53e2d4b0084c1b0029d024954490cab588cd
- SHA512 db8d05fe01e0a4ccc87a526db391630b95d76503dc5cad5933848201e729e1fe9af175539027941ccda984ff85c2237d51842fe0a91bd5a23786d2c3571fb521
- SSDEEP 6144:GzU7blKaP2iCWhWapKRaRXOkN4Swel6f3IsInOCa:oU7M5ijWh0XOW4sEfeOz
- TLSH T11F94CF263580C436F72A07324406FAE40A65AC3E1AD5E54FFB787E7968311979B3B24F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-20_112d8d2c492dbb2da8a9ad1a9910bace_amadey_elex_rhadamanthys_smoke-loader_stop_urelas.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-07-20_112d8d2c492dbb2da8a9ad1a9910bace_amadey_elex_rhadamanthys_smoke-loader_stop_urelas
- Size 426KB
- SHA256 1630ddad002776a81654733f8b0fc15cbaf8ff56f867f25b04da1c62d1e2a3ce
- MD5 112d8d2c492dbb2da8a9ad1a9910bace
- SHA1 fc1b53e2d4b0084c1b0029d024954490cab588cd
- SHA512 db8d05fe01e0a4ccc87a526db391630b95d76503dc5cad5933848201e729e1fe9af175539027941ccda984ff85c2237d51842fe0a91bd5a23786d2c3571fb521
- SSDEEP 6144:GzU7blKaP2iCWhWapKRaRXOkN4Swel6f3IsInOCa:oU7M5ijWh0XOW4sEfeOz
- TLSH T11F94CF263580C436F72A07324406FAE40A65AC3E1AD5E54FFB787E7968311979B3B24F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE