General
- Target 2026-08-05_04a2b070b2dff3d31ec8399a00dcbd1f_amadey_elex_rhadamanthys_smoke-loader
- Size 76KB
- Sample260805-fe9tlavzft
- SHA256 9c44c870e8196dfe95380f361bc77d2c8b87f1aabae4c99f1659017a7aceffdb
- MD5 04a2b070b2dff3d31ec8399a00dcbd1f
- SHA1 fe359938eea2c1049a4bc34123fae262899eedd8
- SHA512 d04ad959a712a25fb13e7b33c1cc440af210a1409aa45289135986a9ef703a581e6e631702d773c491ed0752a8695e1d4afe5eea5843e41ff43319ea01b8ee40
- SSDEEP 1536:E0ktmioyHil5kBionHDtaPM3jIHO+bXbX4QK4kcvx2XHjlG:Ty8iionHDP3jIHO+jbX4QK4kcvx2XHs
- TLSH T1AE737D1337C189B2F96380B1487ACB20535BB82197A142CF7A9A7B0F9E733D149B7657
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_04a2b070b2dff3d31ec8399a00dcbd1f_amadey_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_04a2b070b2dff3d31ec8399a00dcbd1f_amadey_elex_rhadamanthys_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_04a2b070b2dff3d31ec8399a00dcbd1f_amadey_elex_rhadamanthys_smoke-loader
- Size 76KB
- SHA256 9c44c870e8196dfe95380f361bc77d2c8b87f1aabae4c99f1659017a7aceffdb
- MD5 04a2b070b2dff3d31ec8399a00dcbd1f
- SHA1 fe359938eea2c1049a4bc34123fae262899eedd8
- SHA512 d04ad959a712a25fb13e7b33c1cc440af210a1409aa45289135986a9ef703a581e6e631702d773c491ed0752a8695e1d4afe5eea5843e41ff43319ea01b8ee40
- SSDEEP 1536:E0ktmioyHil5kBionHDtaPM3jIHO+bXbX4QK4kcvx2XHjlG:Ty8iionHDP3jIHO+jbX4QK4kcvx2XHs
- TLSH T1AE737D1337C189B2F96380B1487ACB20535BB82197A142CF7A9A7B0F9E733D149B7657
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.