General
- Target 2026-08-04_9abb39b0ff3c498facd8c570e1f39229_amadey_elex_rhadamanthys_smoke-loader_stop_urelas
- Size 426KB
- Sample260804-r6mnxsshkg
- SHA256 a3ceca2efa23da39603e2b7d7016b410a8f4edde87d70ae4023847e58cb4edb0
- MD5 9abb39b0ff3c498facd8c570e1f39229
- SHA1 6c618ea90b7e384f0cf02678d9a940d805608493
- SHA512 1f3328b2cebbf4c98cb64a85b262afe3406a9f45b43e97be9903aae08d5280ce7dae393033ce75b287eaf6a9a529149da1a3c19288d12bd5f38c1acca59aa7de
- SSDEEP 6144:GzU7blKaP2iCWhWapKRaRXOkN4Swel6f3IsInOCI:oU7M5ijWh0XOW4sEfeOl
- TLSH T12D94CF263580C436F72A07324406FAE40A65AC3E1AD5E54FFB787E7968311979B3B24F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-04_9abb39b0ff3c498facd8c570e1f39229_amadey_elex_rhadamanthys_smoke-loader_stop_urelas.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-08-04_9abb39b0ff3c498facd8c570e1f39229_amadey_elex_rhadamanthys_smoke-loader_stop_urelas
- Size 426KB
- SHA256 a3ceca2efa23da39603e2b7d7016b410a8f4edde87d70ae4023847e58cb4edb0
- MD5 9abb39b0ff3c498facd8c570e1f39229
- SHA1 6c618ea90b7e384f0cf02678d9a940d805608493
- SHA512 1f3328b2cebbf4c98cb64a85b262afe3406a9f45b43e97be9903aae08d5280ce7dae393033ce75b287eaf6a9a529149da1a3c19288d12bd5f38c1acca59aa7de
- SSDEEP 6144:GzU7blKaP2iCWhWapKRaRXOkN4Swel6f3IsInOCI:oU7M5ijWh0XOW4sEfeOl
- TLSH T12D94CF263580C436F72A07324406FAE40A65AC3E1AD5E54FFB787E7968311979B3B24F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE