General
- Target 2026-08-01_cc8f5022ec2342585eca1854cb25d433_amadey_elex_remcos_rhadamanthys_smoke-loader
- Size 808KB
- Sample260801-s9phcssvev
- SHA256 fcdeb453a5b27127679513eabc0efbbfac2d85c5d89be0b2c727b740119982cf
- MD5 cc8f5022ec2342585eca1854cb25d433
- SHA1 0c240766f0f1285901018201e8d2a1ce38f07198
- SHA512 db34b63a257e5baf53c426d2c3e24e65c93f7de5599c3608d7ab1fb33c108d061f2b4b09556a82ccd297660232b86a7a18ac4b89dd44a2ce5f8830864e3f164d
- SSDEEP 12288:cfJDxroQwU7/1Cf49tfNuzg9Ozbd/++2Va7ZoLHtZaT2gC0A3YKJLZmP:cfRxrn39tfNuzXzp/+fwlGTOI0qLZmP
- TLSH T1AF05F111B48081B1D0D629324D6A87A11D763E364BEA7DC332C87B597C73DC2A7397AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_cc8f5022ec2342585eca1854cb25d433_amadey_elex_remcos_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_cc8f5022ec2342585eca1854cb25d433_amadey_elex_remcos_rhadamanthys_smoke-loader.exe
Resource
win11ltsc2024-20260710-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_cc8f5022ec2342585eca1854cb25d433_amadey_elex_remcos_rhadamanthys_smoke-loader
- Size 808KB
- SHA256 fcdeb453a5b27127679513eabc0efbbfac2d85c5d89be0b2c727b740119982cf
- MD5 cc8f5022ec2342585eca1854cb25d433
- SHA1 0c240766f0f1285901018201e8d2a1ce38f07198
- SHA512 db34b63a257e5baf53c426d2c3e24e65c93f7de5599c3608d7ab1fb33c108d061f2b4b09556a82ccd297660232b86a7a18ac4b89dd44a2ce5f8830864e3f164d
- SSDEEP 12288:cfJDxroQwU7/1Cf49tfNuzg9Ozbd/++2Va7ZoLHtZaT2gC0A3YKJLZmP:cfRxrn39tfNuzXzp/+fwlGTOI0qLZmP
- TLSH T1AF05F111B48081B1D0D629324D6A87A11D763E364BEA7DC332C87B597C73DC2A7397AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE