General
- Target 2026-08-06_9f6a75ce1d33c09e0e32a562b0c6cbc1_amadey_elex_loda_rhadamanthys_smoke-loader
- Size 2.0MB
- Sample260806-2q3qbascmc
- SHA256 32e05876b868591be72c865613ee1b8456b18a2721cd0ebf81b78cdffa3bd408
- MD5 9f6a75ce1d33c09e0e32a562b0c6cbc1
- SHA1 4ed5d346d5d2104852e8e70374222c71e26283c6
- SHA512 d5cbf732efceb3ffe2aa9769af61a6dafa8cb0becf69b40a8b654d409b60ff21e14c706e0233999600adf5e43999b88d3957c0e924749e599918ee8d5e9d2c69
- SSDEEP 49152:EtrGEQDdEqH9t1VWmKAs10dmYFT5nJ7HDtQQEnrhK3:yaEAdEqHJs10dpJ7HRQQcla
- TLSH T1F095E092E245ACE9E80321B55C7DCB2214177E7D06B9564E36CF362999B338231B7E0F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-06_9f6a75ce1d33c09e0e32a562b0c6cbc1_amadey_elex_loda_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_9f6a75ce1d33c09e0e32a562b0c6cbc1_amadey_elex_loda_rhadamanthys_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_9f6a75ce1d33c09e0e32a562b0c6cbc1_amadey_elex_loda_rhadamanthys_smoke-loader
- Size 2.0MB
- SHA256 32e05876b868591be72c865613ee1b8456b18a2721cd0ebf81b78cdffa3bd408
- MD5 9f6a75ce1d33c09e0e32a562b0c6cbc1
- SHA1 4ed5d346d5d2104852e8e70374222c71e26283c6
- SHA512 d5cbf732efceb3ffe2aa9769af61a6dafa8cb0becf69b40a8b654d409b60ff21e14c706e0233999600adf5e43999b88d3957c0e924749e599918ee8d5e9d2c69
- SSDEEP 49152:EtrGEQDdEqH9t1VWmKAs10dmYFT5nJ7HDtQQEnrhK3:yaEAdEqHJs10dpJ7HRQQcla
- TLSH T1F095E092E245ACE9E80321B55C7DCB2214177E7D06B9564E36CF362999B338231B7E0F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE