General
- Target 2026-08-01_e2aaa77b833b368b62c95cd19f8e2cd8_amadey_elex_remcos_rhadamanthys_smoke-loader
- Size 808KB
- Sample260801-ps1yaavglc
- SHA256 3354eb737bfd1641c5dd873c2e868903998a11a196200a6c75b2de4b65aa7221
- MD5 e2aaa77b833b368b62c95cd19f8e2cd8
- SHA1 5dd7cd5df0b2c59a4d4d3c1622ae19ea769435ef
- SHA512 2faaf2aa468bb7ba70e0f6837da491a724c944fefc8bf781cc452310d56a0155e5a033d4233fcaa4fa6000bc7b60fc7223060ca973bcdbe2888a56a9dc4061ff
- SSDEEP 12288:cfJDxroQwU7/1Cf49tfNuzg9Oi75ivJb6aWfe+8AzT4FhX7sbJuLBYLKJLZmP:cfRxrn39tfNuzXi8JbB5A4Ot+LZmP
- TLSH T1C605F141B58081B2E1D525324D7A87620D7A3E765BDA7EC331C83B297C33DC2A7357AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_e2aaa77b833b368b62c95cd19f8e2cd8_amadey_elex_remcos_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_e2aaa77b833b368b62c95cd19f8e2cd8_amadey_elex_remcos_rhadamanthys_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_e2aaa77b833b368b62c95cd19f8e2cd8_amadey_elex_remcos_rhadamanthys_smoke-loader
- Size 808KB
- SHA256 3354eb737bfd1641c5dd873c2e868903998a11a196200a6c75b2de4b65aa7221
- MD5 e2aaa77b833b368b62c95cd19f8e2cd8
- SHA1 5dd7cd5df0b2c59a4d4d3c1622ae19ea769435ef
- SHA512 2faaf2aa468bb7ba70e0f6837da491a724c944fefc8bf781cc452310d56a0155e5a033d4233fcaa4fa6000bc7b60fc7223060ca973bcdbe2888a56a9dc4061ff
- SSDEEP 12288:cfJDxroQwU7/1Cf49tfNuzg9Oi75ivJb6aWfe+8AzT4FhX7sbJuLBYLKJLZmP:cfRxrn39tfNuzXi8JbB5A4Ot+LZmP
- TLSH T1C605F141B58081B2E1D525324D7A87620D7A3E765BDA7EC331C83B297C33DC2A7357AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE