General
- Target 2026-08-03_a8db1b131d81bf559777a97d18d9e8ca_amadey_elex_remcos_rhadamanthys_smoke-loader
- Size 808KB
- Sample260803-vsrbqsfr71
- SHA256 baa675d100b99ef4ddc578fad5ffbe60abcb486517d55911d90891b16a514d32
- MD5 a8db1b131d81bf559777a97d18d9e8ca
- SHA1 67c09ef5cd7e2925517f0483038b969c5784559e
- SHA512 cea242c7539d061bdb5e93b81564a1493fa9be116ca1c2ef71faf4268d67ec3e41696ab932e762c863c147bcd40a3414d89de606990e814f21ea5d9cd5995d71
- SSDEEP 24576:cfRxrn39tfNuzXibLzaUsM2aZi8nhLZmP:cTr39tfNuzXwzEM2aZ1ZmP
- TLSH T14205E002E98081B2D1D525324D6A93A11D763E364BEA7EC332C83B597C72DC1A7357AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_a8db1b131d81bf559777a97d18d9e8ca_amadey_elex_remcos_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_a8db1b131d81bf559777a97d18d9e8ca_amadey_elex_remcos_rhadamanthys_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_a8db1b131d81bf559777a97d18d9e8ca_amadey_elex_remcos_rhadamanthys_smoke-loader
- Size 808KB
- SHA256 baa675d100b99ef4ddc578fad5ffbe60abcb486517d55911d90891b16a514d32
- MD5 a8db1b131d81bf559777a97d18d9e8ca
- SHA1 67c09ef5cd7e2925517f0483038b969c5784559e
- SHA512 cea242c7539d061bdb5e93b81564a1493fa9be116ca1c2ef71faf4268d67ec3e41696ab932e762c863c147bcd40a3414d89de606990e814f21ea5d9cd5995d71
- SSDEEP 24576:cfRxrn39tfNuzXibLzaUsM2aZi8nhLZmP:cTr39tfNuzXwzEM2aZ1ZmP
- TLSH T14205E002E98081B2D1D525324D6A93A11D763E364BEA7EC332C83B597C72DC1A7357AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE