General
- Target 2026-08-08_48a30a105f544e8375af00b38e2b94e1_amadey_elex_rhadamanthys_smoke-loader
- Size 76KB
- Sample260808-fn72cs1bld
- SHA256 3292942482e474ce5f18919c5e8d734cee2c0adbfbec797e8ac4b1092c0b0cb8
- MD5 48a30a105f544e8375af00b38e2b94e1
- SHA1 c9bd86dc3637fa95a6f8239f6524ad5d128a4807
- SHA512 922f548e70eb73d8eab20c693ade63c8b013111c4f444da439c65eeeaa0465fe2564801ac795b2d7172052666b570b7fe30578574d0aeb76d4d7844faa9e827b
- SSDEEP 1536:E0ktmioyHil5kBionHDtaPM3jIHO+bXbX4QK4kcvx2XHjlkJM:Ty8iionHDP3jIHO+jbX4QK4kcvx2XH8M
- TLSH T18A737D1337C189B2F96380B1487ACB20535BB82197A142CB7B9A7B0F9E733D149B7657
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_48a30a105f544e8375af00b38e2b94e1_amadey_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_48a30a105f544e8375af00b38e2b94e1_amadey_elex_rhadamanthys_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_48a30a105f544e8375af00b38e2b94e1_amadey_elex_rhadamanthys_smoke-loader
- Size 76KB
- SHA256 3292942482e474ce5f18919c5e8d734cee2c0adbfbec797e8ac4b1092c0b0cb8
- MD5 48a30a105f544e8375af00b38e2b94e1
- SHA1 c9bd86dc3637fa95a6f8239f6524ad5d128a4807
- SHA512 922f548e70eb73d8eab20c693ade63c8b013111c4f444da439c65eeeaa0465fe2564801ac795b2d7172052666b570b7fe30578574d0aeb76d4d7844faa9e827b
- SSDEEP 1536:E0ktmioyHil5kBionHDtaPM3jIHO+bXbX4QK4kcvx2XHjlkJM:Ty8iionHDP3jIHO+jbX4QK4kcvx2XH8M
- TLSH T18A737D1337C189B2F96380B1487ACB20535BB82197A142CB7B9A7B0F9E733D149B7657
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.