General
- Target 2026-08-04_b53844574444d6c17d0f758b23c736dc_amadey_elex_rhadamanthys_smoke-loader_stop_urelas
- Size 426KB
- Sample260804-rt6ahagn2s
- SHA256 5853e5a0602f385bd45faa440260d3973f27f8680c0937f32149adf4c7bce757
- MD5 b53844574444d6c17d0f758b23c736dc
- SHA1 275ab7afb17266a415ce0ee326da5050eac029c0
- SHA512 6f7db94a72c6f76240331009827525bbce61bbb52b562763f33387530d61d7bac979589170101000b355fb337a2ae1f52d1e2fb4181c6d3883dd15f5c01a9ace
- SSDEEP 6144:GzU7blKaP2iCWhWapKRaRXOkN4Swel6f3IsInOCK:oU7M5ijWh0XOW4sEfeOD
- TLSH T10D94CF263580C436F72A07324406FAE40A65AC3E1AD5E54FFB787E7968311979B3B24F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-04_b53844574444d6c17d0f758b23c736dc_amadey_elex_rhadamanthys_smoke-loader_stop_urelas.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-08-04_b53844574444d6c17d0f758b23c736dc_amadey_elex_rhadamanthys_smoke-loader_stop_urelas
- Size 426KB
- SHA256 5853e5a0602f385bd45faa440260d3973f27f8680c0937f32149adf4c7bce757
- MD5 b53844574444d6c17d0f758b23c736dc
- SHA1 275ab7afb17266a415ce0ee326da5050eac029c0
- SHA512 6f7db94a72c6f76240331009827525bbce61bbb52b562763f33387530d61d7bac979589170101000b355fb337a2ae1f52d1e2fb4181c6d3883dd15f5c01a9ace
- SSDEEP 6144:GzU7blKaP2iCWhWapKRaRXOkN4Swel6f3IsInOCK:oU7M5ijWh0XOW4sEfeOD
- TLSH T10D94CF263580C436F72A07324406FAE40A65AC3E1AD5E54FFB787E7968311979B3B24F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE