General
- Target 2026-08-05_b23504f6a713c057830c7dfde2ad88c1_amadey_elex_rhadamanthys_smoke-loader
- Size 106KB
- Sample260805-sxvtlsbl6t
- SHA256 8b5eaa64f75414953045c8fb7ceda4eb6ae2e81be12107de7b62f1390a2cc225
- MD5 b23504f6a713c057830c7dfde2ad88c1
- SHA1 baf1ae2e37064ad6b4d4a5dbe41bc0554ebd82b0
- SHA512 572b0c070c39b79496ecfcf135dc32f94f2d2287480405b4b7e3df8ad15b3509077f889d906bc144a6d006413f88fd17d04295459180ed3fe564211b07308f17
- SSDEEP 1536:IjHZ2rfOTrOUkbGheu9UWXoLmcYXV/O16nvaHWeS2s6p:KOOTku9UW4LmcYXVlnvk3SC
- TLSH T1A8B35C2177D0C8B3F173867448F9D493AA27BC16B6B0454F228D63191E72B929DFA31B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-05_b23504f6a713c057830c7dfde2ad88c1_amadey_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_b23504f6a713c057830c7dfde2ad88c1_amadey_elex_rhadamanthys_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_b23504f6a713c057830c7dfde2ad88c1_amadey_elex_rhadamanthys_smoke-loader
- Size 106KB
- SHA256 8b5eaa64f75414953045c8fb7ceda4eb6ae2e81be12107de7b62f1390a2cc225
- MD5 b23504f6a713c057830c7dfde2ad88c1
- SHA1 baf1ae2e37064ad6b4d4a5dbe41bc0554ebd82b0
- SHA512 572b0c070c39b79496ecfcf135dc32f94f2d2287480405b4b7e3df8ad15b3509077f889d906bc144a6d006413f88fd17d04295459180ed3fe564211b07308f17
- SSDEEP 1536:IjHZ2rfOTrOUkbGheu9UWXoLmcYXV/O16nvaHWeS2s6p:KOOTku9UW4LmcYXVlnvk3SC
- TLSH T1A8B35C2177D0C8B3F173867448F9D493AA27BC16B6B0454F228D63191E72B929DFA31B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables built or packed with MPress PE compressor
-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.