General
- Target 2026-08-09_59ec633e21f68de070c77e6ec30a39a6_amadey_elex_karagany_rhadamanthys_smoke-loader
- Size 108KB
- Sample260809-rp79aszbmh
- SHA256 54fc2801bfce8b1e0d82f4172b3b779fe54344a1950daec79702b7f8b2595175
- MD5 59ec633e21f68de070c77e6ec30a39a6
- SHA1 648bcd78cb6434110e8b38dd40a5f203c9fd2b40
- SHA512 edc4acff4489768ac4617a3321255c9f71d265786d3510c7fbdf992f05d87485cc75646bffeda5563edf3dd72dbede222c7990098d05f65658652e33644fc62a
- SSDEEP 3072:MbWjdIPbcia0NFtwwnILn3py6D268XEPKJ2:MbWjMbcCtwwnchx1y
- TLSH T183B37B2172A0C072C097253199F9EBB24E7EF93117B844CBB7E416BA5F603C16A7539B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-09_59ec633e21f68de070c77e6ec30a39a6_amadey_elex_karagany_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_59ec633e21f68de070c77e6ec30a39a6_amadey_elex_karagany_rhadamanthys_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
valleyrat_s2
Version
-
1.0
C2
-
192.252.181.105:443
-
192.252.181.105:433
-
192.252.181.105:80
Attributes
-
campaign_date
2026. 6. 4
Targets
-
- Target 2026-08-09_59ec633e21f68de070c77e6ec30a39a6_amadey_elex_karagany_rhadamanthys_smoke-loader
- Size 108KB
- SHA256 54fc2801bfce8b1e0d82f4172b3b779fe54344a1950daec79702b7f8b2595175
- MD5 59ec633e21f68de070c77e6ec30a39a6
- SHA1 648bcd78cb6434110e8b38dd40a5f203c9fd2b40
- SHA512 edc4acff4489768ac4617a3321255c9f71d265786d3510c7fbdf992f05d87485cc75646bffeda5563edf3dd72dbede222c7990098d05f65658652e33644fc62a
- SSDEEP 3072:MbWjdIPbcia0NFtwwnILn3py6D268XEPKJ2:MbWjMbcCtwwnchx1y
- TLSH T183B37B2172A0C072C097253199F9EBB24E7EF93117B844CBB7E416BA5F603C16A7539B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10