General
- Target 2026-08-09_bb5c9f71ca0101b6b01b690d3657e23f_amadey_elex_loda_rhadamanthys_smoke-loader
- Size 2.3MB
- Sample260809-g97hdssdkb
- SHA256 a59500d85be285d0be39442c590c5cb117ff91e3c0d53789db7431c36b5db5b2
- MD5 bb5c9f71ca0101b6b01b690d3657e23f
- SHA1 fd9eb61e47b5a93d8292687dc9b7624b2d987540
- SHA512 d1b22b07859e7689b755ea8ab47797ab0b3dacdc70ca2eb1053c0032633f258d718ad3fc6af4cd64050da243ef7805a6fb94fda886327e95ff3379681e27c49d
- SSDEEP 24576:YUarjXeXhAiLT27D+Yd9t3J/WG68gxdNAKBP8HQ/iMuqMqu56VRRrhhmmyH0QsxN:YtrqOMudxX6rsKJcQP5k61iN6QdKl2
- TLSH T18BB5AF92F245ACE9E80725B55C7DCA2124077E7D4AB9560E358F722A95B338330B7E0F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_bb5c9f71ca0101b6b01b690d3657e23f_amadey_elex_loda_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_bb5c9f71ca0101b6b01b690d3657e23f_amadey_elex_loda_rhadamanthys_smoke-loader.exe
Resource
win11ltsc2024-20260710-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_bb5c9f71ca0101b6b01b690d3657e23f_amadey_elex_loda_rhadamanthys_smoke-loader
- Size 2.3MB
- SHA256 a59500d85be285d0be39442c590c5cb117ff91e3c0d53789db7431c36b5db5b2
- MD5 bb5c9f71ca0101b6b01b690d3657e23f
- SHA1 fd9eb61e47b5a93d8292687dc9b7624b2d987540
- SHA512 d1b22b07859e7689b755ea8ab47797ab0b3dacdc70ca2eb1053c0032633f258d718ad3fc6af4cd64050da243ef7805a6fb94fda886327e95ff3379681e27c49d
- SSDEEP 24576:YUarjXeXhAiLT27D+Yd9t3J/WG68gxdNAKBP8HQ/iMuqMqu56VRRrhhmmyH0QsxN:YtrqOMudxX6rsKJcQP5k61iN6QdKl2
- TLSH T18BB5AF92F245ACE9E80725B55C7DCA2124077E7D4AB9560E358F722A95B338330B7E0F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE