General
- Target 2026-08-03_56c6f4a46b26f3a47488acb216a0a286_amadey_elex_remcos_rhadamanthys_smoke-loader
- Size 808KB
- Sample260803-wsb3gsgr7t
- SHA256 15c918e1118a10970c0430e69b07d7ec8768c9958536f9b70b970138163ce294
- MD5 56c6f4a46b26f3a47488acb216a0a286
- SHA1 6fe4dcc62fe0d2689942231b2ec4ef409b59baf0
- SHA512 489dca51f0a910a90c30b2ca3e1bb0089f2ff94b18c17274d7cb87bfa7662759213d1bb491eef936076ada19ff967e4bc4dfb310e6539e3927063aec61bd3c85
- SSDEEP 24576:cfRxrn39tfNuzXUrrrlq3k5WwG5n1DAdv0fLZmP:cTr39tfNuzXQ5q3si1ZmP
- TLSH T18E05F115B98081B2D0D529314D6A97621DB63E364BEABDC331C83B683C73DC197397AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_56c6f4a46b26f3a47488acb216a0a286_amadey_elex_remcos_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_56c6f4a46b26f3a47488acb216a0a286_amadey_elex_remcos_rhadamanthys_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_56c6f4a46b26f3a47488acb216a0a286_amadey_elex_remcos_rhadamanthys_smoke-loader
- Size 808KB
- SHA256 15c918e1118a10970c0430e69b07d7ec8768c9958536f9b70b970138163ce294
- MD5 56c6f4a46b26f3a47488acb216a0a286
- SHA1 6fe4dcc62fe0d2689942231b2ec4ef409b59baf0
- SHA512 489dca51f0a910a90c30b2ca3e1bb0089f2ff94b18c17274d7cb87bfa7662759213d1bb491eef936076ada19ff967e4bc4dfb310e6539e3927063aec61bd3c85
- SSDEEP 24576:cfRxrn39tfNuzXUrrrlq3k5WwG5n1DAdv0fLZmP:cTr39tfNuzXQ5q3si1ZmP
- TLSH T18E05F115B98081B2D0D529314D6A97621DB63E364BEABDC331C83B683C73DC197397AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE