General
- Target 2026-07-27_6d6de7150aaecd2e05eddc5aa40cb442_amadey_elex_loda_rhadamanthys_smoke-loader
- Size 2.3MB
- Sample260727-lfhdmacm4z
- SHA256 bcd86b88ff958729ea62f6f27effc61fb20074a83a8124a6c86c13e3ab96fbe3
- MD5 6d6de7150aaecd2e05eddc5aa40cb442
- SHA1 2acf52d59c424ad56d0129ba93367c6b241d8b23
- SHA512 1d7dc8905d77fbcd06f19fc621475448ee885b7ab381c1aef68d4679042c71ea113db6f59b368d8b726803c256ac38a55a9d800a2ddae7e5dcc5c95d9ddd8d8b
- SSDEEP 49152:YtrqOMudxX6bMpYGSFcZxoSeNzQa7EsKl2:WWOBdxX6Ipjm3Nz1Ng
- TLSH T159B5AF92F245ACE9E80725B59C7DCA2124477EBD46B9560E358F722985B338330B7E0F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-27_6d6de7150aaecd2e05eddc5aa40cb442_amadey_elex_loda_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_6d6de7150aaecd2e05eddc5aa40cb442_amadey_elex_loda_rhadamanthys_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_6d6de7150aaecd2e05eddc5aa40cb442_amadey_elex_loda_rhadamanthys_smoke-loader
- Size 2.3MB
- SHA256 bcd86b88ff958729ea62f6f27effc61fb20074a83a8124a6c86c13e3ab96fbe3
- MD5 6d6de7150aaecd2e05eddc5aa40cb442
- SHA1 2acf52d59c424ad56d0129ba93367c6b241d8b23
- SHA512 1d7dc8905d77fbcd06f19fc621475448ee885b7ab381c1aef68d4679042c71ea113db6f59b368d8b726803c256ac38a55a9d800a2ddae7e5dcc5c95d9ddd8d8b
- SSDEEP 49152:YtrqOMudxX6bMpYGSFcZxoSeNzQa7EsKl2:WWOBdxX6Ipjm3Nz1Ng
- TLSH T159B5AF92F245ACE9E80725B59C7DCA2124477EBD46B9560E358F722985B338330B7E0F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE