General
- Target 2026-08-05_74f87bf854c2c9a37d4ea71818075be7_amadey_elex_loda_rhadamanthys_smoke-loader
- Size 2.0MB
- Sample260805-wweyjsdc23
- SHA256 28f082be04e7f6edef13a955ba750950a8421ff246026d4f5f34bad3d7bd4f43
- MD5 74f87bf854c2c9a37d4ea71818075be7
- SHA1 004a4c5acfa9bffc1a094ff96eb238cd86dfb455
- SHA512 9649246795714ae8638060e311598b93622fd9e9f27b242be69079290390d9b781cd4069cfc6ebdac8ac6488ff6d5713986d93a5cdc84b706b9e208c0bbdd052
- SSDEEP 49152:EtrGEQDdEqHXPpGg4wAo/rJZi21ge7e1wy6oIuBK3:yaEAdEqHETTo1ZiogeAwy6oIuBa
- TLSH T14D95E091F245ACE9E80321B55D79CA2124077E7D0AB9564E36CF372999B338231B7E0F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_74f87bf854c2c9a37d4ea71818075be7_amadey_elex_loda_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_74f87bf854c2c9a37d4ea71818075be7_amadey_elex_loda_rhadamanthys_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_74f87bf854c2c9a37d4ea71818075be7_amadey_elex_loda_rhadamanthys_smoke-loader
- Size 2.0MB
- SHA256 28f082be04e7f6edef13a955ba750950a8421ff246026d4f5f34bad3d7bd4f43
- MD5 74f87bf854c2c9a37d4ea71818075be7
- SHA1 004a4c5acfa9bffc1a094ff96eb238cd86dfb455
- SHA512 9649246795714ae8638060e311598b93622fd9e9f27b242be69079290390d9b781cd4069cfc6ebdac8ac6488ff6d5713986d93a5cdc84b706b9e208c0bbdd052
- SSDEEP 49152:EtrGEQDdEqHXPpGg4wAo/rJZi21ge7e1wy6oIuBK3:yaEAdEqHETTo1ZiogeAwy6oIuBa
- TLSH T14D95E091F245ACE9E80321B55D79CA2124077E7D0AB9564E36CF372999B338231B7E0F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE