General
- Target 2026-07-29_666737a4c57ffd692af073e64bf1c30a_amadey_elex_loda_rhadamanthys_smoke-loader
- Size 2.0MB
- Sample260729-hrbtfazvay
- SHA256 1137f1facfd4fd8f28dabfde4eb46656c63bb949d90e0d6c62e017df14719f27
- MD5 666737a4c57ffd692af073e64bf1c30a
- SHA1 b10f3ca9ae81b1c95f0d205adc22b0aa0f40a1f2
- SHA512 a63c4d2e27fd067e8e117350bfdc2b8511c15fe4b20279ce59e0dd241da763b3c3361506f8ebe7e4f280fed53fb0cebabfbda600871ca5ce8d37b3a5cc6fd788
- SSDEEP 49152:VtrGEQDdEqH+/WP2eS3kqNUT8Lhm1P+iK3:naEAdEqH3PfS3kqwGQpa
- TLSH T1F895D091E245A9E9E80325B55C3DCA2214077E7D4AB9564F36CF362989B338331B7E0F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_666737a4c57ffd692af073e64bf1c30a_amadey_elex_loda_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_666737a4c57ffd692af073e64bf1c30a_amadey_elex_loda_rhadamanthys_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_666737a4c57ffd692af073e64bf1c30a_amadey_elex_loda_rhadamanthys_smoke-loader
- Size 2.0MB
- SHA256 1137f1facfd4fd8f28dabfde4eb46656c63bb949d90e0d6c62e017df14719f27
- MD5 666737a4c57ffd692af073e64bf1c30a
- SHA1 b10f3ca9ae81b1c95f0d205adc22b0aa0f40a1f2
- SHA512 a63c4d2e27fd067e8e117350bfdc2b8511c15fe4b20279ce59e0dd241da763b3c3361506f8ebe7e4f280fed53fb0cebabfbda600871ca5ce8d37b3a5cc6fd788
- SSDEEP 49152:VtrGEQDdEqH+/WP2eS3kqNUT8Lhm1P+iK3:naEAdEqH3PfS3kqwGQpa
- TLSH T1F895D091E245A9E9E80325B55C3DCA2214077E7D4AB9564F36CF362989B338331B7E0F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE