General
- Target 2026-08-05_3c1f3d1bd5f0b07a409cde2b7449a826_amadey_elex_loda_rhadamanthys_smoke-loader
- Size 2.3MB
- Sample260805-xfetaaek31
- SHA256 de4248e9e01fbfe8bca106b01efc27edb941ff1603cfec564a1ad3e30782309c
- MD5 3c1f3d1bd5f0b07a409cde2b7449a826
- SHA1 7bd258c7d369c2d4f42a6ad8f92af24b6faaf886
- SHA512 67e8ac4c87e48efa43f79a694b9429bf98104c9cf1fdb1a6e1238466868991af1be715a48738b43ff2c4ee9010ee89c620851eff1d5c9fe898405eff92c6d830
- SSDEEP 49152:6trqOMudxX6557YUPC7z66xRPbGcVKl2:cWOBdxX65iUqhL9g
- TLSH T137B5AE92F245ACE9E80325B55C7DCA2124477E7D4AB9560E358F722A95B338330B7E0F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_3c1f3d1bd5f0b07a409cde2b7449a826_amadey_elex_loda_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_3c1f3d1bd5f0b07a409cde2b7449a826_amadey_elex_loda_rhadamanthys_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_3c1f3d1bd5f0b07a409cde2b7449a826_amadey_elex_loda_rhadamanthys_smoke-loader
- Size 2.3MB
- SHA256 de4248e9e01fbfe8bca106b01efc27edb941ff1603cfec564a1ad3e30782309c
- MD5 3c1f3d1bd5f0b07a409cde2b7449a826
- SHA1 7bd258c7d369c2d4f42a6ad8f92af24b6faaf886
- SHA512 67e8ac4c87e48efa43f79a694b9429bf98104c9cf1fdb1a6e1238466868991af1be715a48738b43ff2c4ee9010ee89c620851eff1d5c9fe898405eff92c6d830
- SSDEEP 49152:6trqOMudxX6557YUPC7z66xRPbGcVKl2:cWOBdxX65iUqhL9g
- TLSH T137B5AE92F245ACE9E80325B55C7DCA2124477E7D4AB9560E358F722A95B338330B7E0F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE