General
- Target 2026-08-04_de9f5fef3f15b97a6476e1df47c7f3c0_amadey_elex_loda_rhadamanthys_smoke-loader
- Size 2.3MB
- Sample260804-q7da7syvcs
- SHA256 a4bd83720fc1d63b08b478238339c3fa05cc21dd8c8f324aaa442e8ab35ae3e7
- MD5 de9f5fef3f15b97a6476e1df47c7f3c0
- SHA1 6bcc15cbd561ec448087af49cae808c480f2a664
- SHA512 ad4f3e62b74ae653c9ca473224fa3902befa6b32543fa601508846271846cd5d583ad36b64f3e8c0b4c05c1fd9bd301e4bd7f630affe33d87994df4397acae1f
- SSDEEP 49152:YtrqOMudxX6hP4dT0Xo7fe0cdTjy740KmdTKl2:WWOBdxX6qqXo7f5l740K2g
- TLSH T142B5AF92F245ACE9E80725B55C7DCA2124477E7D4AB9560E358F722A85B338330B7E0F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_de9f5fef3f15b97a6476e1df47c7f3c0_amadey_elex_loda_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_de9f5fef3f15b97a6476e1df47c7f3c0_amadey_elex_loda_rhadamanthys_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_de9f5fef3f15b97a6476e1df47c7f3c0_amadey_elex_loda_rhadamanthys_smoke-loader
- Size 2.3MB
- SHA256 a4bd83720fc1d63b08b478238339c3fa05cc21dd8c8f324aaa442e8ab35ae3e7
- MD5 de9f5fef3f15b97a6476e1df47c7f3c0
- SHA1 6bcc15cbd561ec448087af49cae808c480f2a664
- SHA512 ad4f3e62b74ae653c9ca473224fa3902befa6b32543fa601508846271846cd5d583ad36b64f3e8c0b4c05c1fd9bd301e4bd7f630affe33d87994df4397acae1f
- SSDEEP 49152:YtrqOMudxX6hP4dT0Xo7fe0cdTjy740KmdTKl2:WWOBdxX6qqXo7f5l740K2g
- TLSH T142B5AF92F245ACE9E80725B55C7DCA2124477E7D4AB9560E358F722A85B338330B7E0F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE