General
- Target 2026-08-04_0113a422e665bae7a48c6421f6b7d75b_amadey_elex_loda_rhadamanthys_smoke-loader
- Size 2.3MB
- Sample260804-vdflpaszdy
- SHA256 160786c2a4d653d68c5b6fbc7e42b976cbaa6628ab555066d4a3e6cfe8e2076b
- MD5 0113a422e665bae7a48c6421f6b7d75b
- SHA1 17e3dbcfb4dc0c97d6784178616b9e44d416575c
- SHA512 cd231ff5677601facc6765fb3e13d953bebb01ba015c058d46b6110fc597b6b775123def354a571f78f967232145677e654b0a188fdfe426c168220f06dcb338
- SSDEEP 49152:YtrqOMudxX6fEMegZfKlx9pqL1z6wPKl2:WWOBdxX6MMegZfKbqtg
- TLSH T146B5AF92F245ACE9E80715B59C3DCA2124477E7D4AB9560E358F762A85B338330B7E0F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_0113a422e665bae7a48c6421f6b7d75b_amadey_elex_loda_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_0113a422e665bae7a48c6421f6b7d75b_amadey_elex_loda_rhadamanthys_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_0113a422e665bae7a48c6421f6b7d75b_amadey_elex_loda_rhadamanthys_smoke-loader
- Size 2.3MB
- SHA256 160786c2a4d653d68c5b6fbc7e42b976cbaa6628ab555066d4a3e6cfe8e2076b
- MD5 0113a422e665bae7a48c6421f6b7d75b
- SHA1 17e3dbcfb4dc0c97d6784178616b9e44d416575c
- SHA512 cd231ff5677601facc6765fb3e13d953bebb01ba015c058d46b6110fc597b6b775123def354a571f78f967232145677e654b0a188fdfe426c168220f06dcb338
- SSDEEP 49152:YtrqOMudxX6fEMegZfKlx9pqL1z6wPKl2:WWOBdxX6MMegZfKbqtg
- TLSH T146B5AF92F245ACE9E80715B59C3DCA2124477E7D4AB9560E358F762A85B338330B7E0F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE