General
- Target 2026-07-31_b578f49f96622b6ef11de9feecf4f59f_amadey_elex_loda_rhadamanthys_smoke-loader
- Size 2.3MB
- Sample260731-vjss7sysfx
- SHA256 c4ff688154f0275796e161585d4a9a724cd57f02772a0ff174bc0d081ba7eb0b
- MD5 b578f49f96622b6ef11de9feecf4f59f
- SHA1 47bf13404e10cd5487e904b1d96a0153387e1327
- SHA512 92cf122f6f747a595fe22bfbbd747c603b60a1e9e74f7c40c2eeee4aebc394fe8c7b2975195e01fb0c9db37a4d56d8d5a08bb0a4c9025222b82c9fb7857d9b0d
- SSDEEP 49152:YtrqOMudxX67qfSJgtEXZTGEMO8U4STmK0vBHKl2:WWOBdxX6w8OOxMOySyKKBHg
- TLSH T167B5BF92F245ACE9E80315B59C7DCA2124477E7D4AB9560E358F722A95B338330B7E0F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_b578f49f96622b6ef11de9feecf4f59f_amadey_elex_loda_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_b578f49f96622b6ef11de9feecf4f59f_amadey_elex_loda_rhadamanthys_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_b578f49f96622b6ef11de9feecf4f59f_amadey_elex_loda_rhadamanthys_smoke-loader
- Size 2.3MB
- SHA256 c4ff688154f0275796e161585d4a9a724cd57f02772a0ff174bc0d081ba7eb0b
- MD5 b578f49f96622b6ef11de9feecf4f59f
- SHA1 47bf13404e10cd5487e904b1d96a0153387e1327
- SHA512 92cf122f6f747a595fe22bfbbd747c603b60a1e9e74f7c40c2eeee4aebc394fe8c7b2975195e01fb0c9db37a4d56d8d5a08bb0a4c9025222b82c9fb7857d9b0d
- SSDEEP 49152:YtrqOMudxX67qfSJgtEXZTGEMO8U4STmK0vBHKl2:WWOBdxX6w8OOxMOySyKKBHg
- TLSH T167B5BF92F245ACE9E80315B59C7DCA2124477E7D4AB9560E358F722A95B338330B7E0F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE