General
- Target 2026-07-28_22e77002f558ffef0afea4dc50f892dc_amadey_elex_remcos_rhadamanthys_smoke-loader
- Size 808KB
- Sample260728-zwcd7swcmd
- SHA256 b0209e3fcefd575e00511ce48a55d448ab3fa7a4bfb94e77fdb8eb6c97a594be
- MD5 22e77002f558ffef0afea4dc50f892dc
- SHA1 b224e74503cb181257792cc40d56e6d00af9c68f
- SHA512 ae4f4fba89394cab85043e17e68b5009f5d7ad29c4ebdf55db8191d815249b4fa24949cfe01e3bb27dafaef77ad86351a600229059c9d5082177f73b99fe3d68
- SSDEEP 12288:cfJDxroQwU7/1Cf49tfNuzg9O63jICN378PpScER7g6WRxWXRHypEjigDKJLZmP:cfRxrn39tfNuzX6h3+CgPxWXRiNLZmP
- TLSH T11E05F111E58081B2D0D529324DBA87A11D763E364BEA7DC331C87B687C72DC2A7357AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-28_22e77002f558ffef0afea4dc50f892dc_amadey_elex_remcos_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_22e77002f558ffef0afea4dc50f892dc_amadey_elex_remcos_rhadamanthys_smoke-loader.exe
Resource
win11ltsc2024-20260710-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_22e77002f558ffef0afea4dc50f892dc_amadey_elex_remcos_rhadamanthys_smoke-loader
- Size 808KB
- SHA256 b0209e3fcefd575e00511ce48a55d448ab3fa7a4bfb94e77fdb8eb6c97a594be
- MD5 22e77002f558ffef0afea4dc50f892dc
- SHA1 b224e74503cb181257792cc40d56e6d00af9c68f
- SHA512 ae4f4fba89394cab85043e17e68b5009f5d7ad29c4ebdf55db8191d815249b4fa24949cfe01e3bb27dafaef77ad86351a600229059c9d5082177f73b99fe3d68
- SSDEEP 12288:cfJDxroQwU7/1Cf49tfNuzg9O63jICN378PpScER7g6WRxWXRHypEjigDKJLZmP:cfRxrn39tfNuzX6h3+CgPxWXRiNLZmP
- TLSH T11E05F111E58081B2D0D529324DBA87A11D763E364BEA7DC331C87B687C72DC2A7357AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE