General
- Target 2026-08-04_56b8f8245f1409ffc2f5e3e1ddff5d45_amadey_elex_loda_rhadamanthys_smoke-loader
- Size 2.3MB
- Sample260804-s6mjladb36
- SHA256 74936fd7b5457ef4327cdd9a5bc8280e718475377c3b30b79e68637caee7ff14
- MD5 56b8f8245f1409ffc2f5e3e1ddff5d45
- SHA1 edc7bb6f7f684d71bb9ee1f7da78b263c67531a2
- SHA512 c1937907477b6a8541ca98a5dc9a899bd8872e197524c99162da9ddbfadd1a75159221f3a755f1a39362ca566d9667099ea8a311039975e494f91512825713bd
- SSDEEP 49152:YtrqOMudxX6n2hXpVEwuhAHT3gRysSTTHaLldKl2:WWOBdxX62HKqHbgQsMSdg
- TLSH T15BB5AF92F245ACE9E80715B59C7DCA2124477E7D4AB9560E358F722A85B338330B7E0F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_56b8f8245f1409ffc2f5e3e1ddff5d45_amadey_elex_loda_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_56b8f8245f1409ffc2f5e3e1ddff5d45_amadey_elex_loda_rhadamanthys_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_56b8f8245f1409ffc2f5e3e1ddff5d45_amadey_elex_loda_rhadamanthys_smoke-loader
- Size 2.3MB
- SHA256 74936fd7b5457ef4327cdd9a5bc8280e718475377c3b30b79e68637caee7ff14
- MD5 56b8f8245f1409ffc2f5e3e1ddff5d45
- SHA1 edc7bb6f7f684d71bb9ee1f7da78b263c67531a2
- SHA512 c1937907477b6a8541ca98a5dc9a899bd8872e197524c99162da9ddbfadd1a75159221f3a755f1a39362ca566d9667099ea8a311039975e494f91512825713bd
- SSDEEP 49152:YtrqOMudxX6n2hXpVEwuhAHT3gRysSTTHaLldKl2:WWOBdxX62HKqHbgQsMSdg
- TLSH T15BB5AF92F245ACE9E80715B59C7DCA2124477E7D4AB9560E358F722A85B338330B7E0F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE