General
- Target 2026-08-01_b626b02121e11c7dddf8665be8e3d4e6_amadey_elex_karagany_rhadamanthys_smoke-loader
- Size 401KB
- Sample260801-ff33faxhrf
- SHA256 8a9e7ad4a20d48f7b8300a8baafeba0ed76e1f917dd4ae968a149943a5d374d2
- MD5 b626b02121e11c7dddf8665be8e3d4e6
- SHA1 00b45f3923ce053d2d0254fc33480787ef89230c
- SHA512 beddedb93fc7bc7086204cbf4bb079e0b221897651c65827672750a49df66ef202cc1792d406a79c3af6688afc8db3a82fcaf234aaa59cff2fd63d567a55ea3d
- SSDEEP 6144:Jivd27I1O8aYQ7ATa7QG0tzC/mtPZBhVnnoMwPv2CdLeTSJVDvMj/xUT/PCYgiZ:Jh8/BQ7Am7QnPZBhVwuCdq4VzWxUTu0
- TLSH T12F94BE1176508475E3290B304896FAF509A9AD3A15E8E50FF3787E3A6E301C3AB7725F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-01_b626b02121e11c7dddf8665be8e3d4e6_amadey_elex_karagany_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
1.234.83.146
-
133.242.129.155
-
218.54.31.165
-
218.54.31.226
Targets
-
- Target 2026-08-01_b626b02121e11c7dddf8665be8e3d4e6_amadey_elex_karagany_rhadamanthys_smoke-loader
- Size 401KB
- SHA256 8a9e7ad4a20d48f7b8300a8baafeba0ed76e1f917dd4ae968a149943a5d374d2
- MD5 b626b02121e11c7dddf8665be8e3d4e6
- SHA1 00b45f3923ce053d2d0254fc33480787ef89230c
- SHA512 beddedb93fc7bc7086204cbf4bb079e0b221897651c65827672750a49df66ef202cc1792d406a79c3af6688afc8db3a82fcaf234aaa59cff2fd63d567a55ea3d
- SSDEEP 6144:Jivd27I1O8aYQ7ATa7QG0tzC/mtPZBhVnnoMwPv2CdLeTSJVDvMj/xUT/PCYgiZ:Jh8/BQ7Am7QnPZBhVwuCdq4VzWxUTu0
- TLSH T12F94BE1176508475E3290B304896FAF509A9AD3A15E8E50FF3787E3A6E301C3AB7725F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE