General
- Target 2026-08-10_6b5a5b59bcb761876a400c6c9ea23431_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 367KB
- Sample260810-2avd1azfkb
- SHA256 5e671d4cf9385d01cb26f284ff4204b431f1a9edb078f0a96464e3fb0830b43d
- MD5 6b5a5b59bcb761876a400c6c9ea23431
- SHA1 359ddce708c33bf8a43d2ab05fb99c134b1f2431
- SHA512 2dfd28456a55d8f64d98a7ddc7566263829ddb392ea1cde508dd29ef6131b47be25d6f2a22fabe32b4580bf071582c7b2b0a6e6776e61f2f1ee33c66bd0c2d04
- SSDEEP 6144:OuJkl8DV12C28tLN2/FkCOfHVm0fMaHftvCGCBhDOHjTPmXHk62p8:OzGL2C2aZ2/F1WHHUaveOHjTI
- TLSH T10384CE223640C035E32917310955FAF41AA9AD3914D9EA4FF7783E3A6E712839B7724F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-10_6b5a5b59bcb761876a400c6c9ea23431_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
1.234.83.146
-
133.242.129.155
-
218.54.31.165
-
218.54.31.226
Targets
-
- Target 2026-08-10_6b5a5b59bcb761876a400c6c9ea23431_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 367KB
- SHA256 5e671d4cf9385d01cb26f284ff4204b431f1a9edb078f0a96464e3fb0830b43d
- MD5 6b5a5b59bcb761876a400c6c9ea23431
- SHA1 359ddce708c33bf8a43d2ab05fb99c134b1f2431
- SHA512 2dfd28456a55d8f64d98a7ddc7566263829ddb392ea1cde508dd29ef6131b47be25d6f2a22fabe32b4580bf071582c7b2b0a6e6776e61f2f1ee33c66bd0c2d04
- SSDEEP 6144:OuJkl8DV12C28tLN2/FkCOfHVm0fMaHftvCGCBhDOHjTPmXHk62p8:OzGL2C2aZ2/F1WHHUaveOHjTI
- TLSH T10384CE223640C035E32917310955FAF41AA9AD3914D9EA4FF7783E3A6E712839B7724F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE