General
- Target 2026-07-28_b3f28fe091a0296cf9b75ad757d37f4f_amadey_elex_remcos_rhadamanthys_smoke-loader
- Size 808KB
- Sample260728-yv23sswxew
- SHA256 2bc99c7f656ab4513407ef9ce011173ed73f564b9bc3c94e0acf3ec910efd26b
- MD5 b3f28fe091a0296cf9b75ad757d37f4f
- SHA1 d21ca16129fe317df66359a73c1f07e0b3027bac
- SHA512 72fec666df6cf5723504f898b6365e3bf1d6cd0fa870e376d6230de99319823d0ee060217e9b5c2cb72ff21821209d7fa7575f4c709f666c449c5fbcbbda73bd
- SSDEEP 24576:cfRxrn39tfNuzX8OKaHf5HO+Ze23BLZmP:cTr39tfNuzXNKcHOs3NZmP
- TLSH T16905F101B44081B2D1D629324D7A87921D763E364BEA7DC332D87B297C72DC1A7397AE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-28_b3f28fe091a0296cf9b75ad757d37f4f_amadey_elex_remcos_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_b3f28fe091a0296cf9b75ad757d37f4f_amadey_elex_remcos_rhadamanthys_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_b3f28fe091a0296cf9b75ad757d37f4f_amadey_elex_remcos_rhadamanthys_smoke-loader
- Size 808KB
- SHA256 2bc99c7f656ab4513407ef9ce011173ed73f564b9bc3c94e0acf3ec910efd26b
- MD5 b3f28fe091a0296cf9b75ad757d37f4f
- SHA1 d21ca16129fe317df66359a73c1f07e0b3027bac
- SHA512 72fec666df6cf5723504f898b6365e3bf1d6cd0fa870e376d6230de99319823d0ee060217e9b5c2cb72ff21821209d7fa7575f4c709f666c449c5fbcbbda73bd
- SSDEEP 24576:cfRxrn39tfNuzX8OKaHf5HO+Ze23BLZmP:cTr39tfNuzXNKcHOs3NZmP
- TLSH T16905F101B44081B2D1D629324D7A87921D763E364BEA7DC332D87B297C72DC1A7397AE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE