General
- Target 2026-08-03_448c71277c4b0c54e58d7e14616ad020_amadey_elex_remcos_rhadamanthys_smoke-loader
- Size 754KB
- Sample260803-ftg25aygrf
- SHA256 f679f87479e72001ee7def2fd79d2381249dc1cf0d5736a032a4a17881f588c7
- MD5 448c71277c4b0c54e58d7e14616ad020
- SHA1 53c709f60a446e06efc7513463caac5fdb0bda9d
- SHA512 b11b8ae5015f1eab1f63545f6f177d9638ba09a4de9e416ddeae59e62773edce25721b217867d60cdcfbf8c67dbc5baab70ebc0924831321eb6e95b1500bec6a
- SSDEEP 12288:4fNzTW2Qz9H4vROWO8SnUvAqRoLsI9mazm8ZI0mWNNT2QYa7vi1vdgjgKJLZmY:4fhw9H4vROWO8Snj4emgz60ms7viZdgd
- TLSH T1C0F4E152A58041B6D1D624324D7A82610D763F775BEAAAC372D03B583C32DC1A7357EF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_448c71277c4b0c54e58d7e14616ad020_amadey_elex_remcos_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_448c71277c4b0c54e58d7e14616ad020_amadey_elex_remcos_rhadamanthys_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_448c71277c4b0c54e58d7e14616ad020_amadey_elex_remcos_rhadamanthys_smoke-loader
- Size 754KB
- SHA256 f679f87479e72001ee7def2fd79d2381249dc1cf0d5736a032a4a17881f588c7
- MD5 448c71277c4b0c54e58d7e14616ad020
- SHA1 53c709f60a446e06efc7513463caac5fdb0bda9d
- SHA512 b11b8ae5015f1eab1f63545f6f177d9638ba09a4de9e416ddeae59e62773edce25721b217867d60cdcfbf8c67dbc5baab70ebc0924831321eb6e95b1500bec6a
- SSDEEP 12288:4fNzTW2Qz9H4vROWO8SnUvAqRoLsI9mazm8ZI0mWNNT2QYa7vi1vdgjgKJLZmY:4fhw9H4vROWO8Snj4emgz60ms7viZdgd
- TLSH T1C0F4E152A58041B6D1D624324D7A82610D763F775BEAAAC372D03B583C32DC1A7357EF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE