General
- Target 2026-07-27_4d5be21c2059404a9ec1acbc9d30ffa0_amadey_elex_loda_rhadamanthys_smoke-loader
- Size 2.3MB
- Sample260727-pezhas1gka
- SHA256 dfba66d1a4fbf47a924703dfc38194733bbf19deef4ed92ecda3d62dc76ed1be
- MD5 4d5be21c2059404a9ec1acbc9d30ffa0
- SHA1 eaabf91cbceea3a07d1ace4f91bed33ea97febdb
- SHA512 21e60a05638ee6e46b416d82d4378cb5aa5aaf4190a3072f93b5a0408d8478aaae41bec7bb5307b55ffe5cbf642dd1f7f2becb1f8f0d3149d821f379794a221c
- SSDEEP 24576:YUarjXeXhAiLT27D+Yd9t3J/WG6EfSr5UGFmlfHje+ZhwnTpd7iAzNTU9zDwRUXp:YtrqOMudxX6eObmHhOTrhEXGKl2
- TLSH T1BAB5AF92F245ACE9E80315B59C7DCA2124477E7D4AB9560E358F762A85B338330B7E0F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-27_4d5be21c2059404a9ec1acbc9d30ffa0_amadey_elex_loda_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_4d5be21c2059404a9ec1acbc9d30ffa0_amadey_elex_loda_rhadamanthys_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_4d5be21c2059404a9ec1acbc9d30ffa0_amadey_elex_loda_rhadamanthys_smoke-loader
- Size 2.3MB
- SHA256 dfba66d1a4fbf47a924703dfc38194733bbf19deef4ed92ecda3d62dc76ed1be
- MD5 4d5be21c2059404a9ec1acbc9d30ffa0
- SHA1 eaabf91cbceea3a07d1ace4f91bed33ea97febdb
- SHA512 21e60a05638ee6e46b416d82d4378cb5aa5aaf4190a3072f93b5a0408d8478aaae41bec7bb5307b55ffe5cbf642dd1f7f2becb1f8f0d3149d821f379794a221c
- SSDEEP 24576:YUarjXeXhAiLT27D+Yd9t3J/WG6EfSr5UGFmlfHje+ZhwnTpd7iAzNTU9zDwRUXp:YtrqOMudxX6eObmHhOTrhEXGKl2
- TLSH T1BAB5AF92F245ACE9E80315B59C7DCA2124477E7D4AB9560E358F762A85B338330B7E0F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE