General
- Target 2026-08-05_a7913724219fd5dcfeb8663216a12c41_amadey_elex_remcos_rhadamanthys_smoke-loader
- Size 808KB
- Sample260805-wchkbsch58
- SHA256 38a3138319822ed87a71924cd5df96d5347d6fa75ab9c8e0ca082095ec9810d2
- MD5 a7913724219fd5dcfeb8663216a12c41
- SHA1 476296d8f399bd14fe921114004a160972b59a6c
- SHA512 d51ac4f50380f87782f67884355a32521694575c093f3f6607e74e4a4a314966c317ca84737249af161ef75ac7bbe8f72152918bc43d15b566d08167159ee0e1
- SSDEEP 24576:cfRxrn39tfNuzXDAGfE2JakkJJicCnnLZmP:cTr39tfNuzXEGfEL4LZmP
- TLSH T17405F101A98081B2D1D528324DB987A11E763E364B9A6DC332D87B193D73DC1E7397AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_a7913724219fd5dcfeb8663216a12c41_amadey_elex_remcos_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_a7913724219fd5dcfeb8663216a12c41_amadey_elex_remcos_rhadamanthys_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_a7913724219fd5dcfeb8663216a12c41_amadey_elex_remcos_rhadamanthys_smoke-loader
- Size 808KB
- SHA256 38a3138319822ed87a71924cd5df96d5347d6fa75ab9c8e0ca082095ec9810d2
- MD5 a7913724219fd5dcfeb8663216a12c41
- SHA1 476296d8f399bd14fe921114004a160972b59a6c
- SHA512 d51ac4f50380f87782f67884355a32521694575c093f3f6607e74e4a4a314966c317ca84737249af161ef75ac7bbe8f72152918bc43d15b566d08167159ee0e1
- SSDEEP 24576:cfRxrn39tfNuzXDAGfE2JakkJJicCnnLZmP:cTr39tfNuzXEGfEL4LZmP
- TLSH T17405F101A98081B2D1D528324DB987A11E763E364B9A6DC332D87B193D73DC1E7397AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE