General
- Target 2026-08-10_ab0f57f842ed767a479daae935ecef64_amadey_elex_rhadamanthys_smoke-loader_stop_urelas
- Size 424KB
- Sample260810-ym1vrsxapb
- SHA256 2b26a3ca3c4795129a4f3fb5f36bbb47d0fba4a32443213963ce648e9f3c943c
- MD5 ab0f57f842ed767a479daae935ecef64
- SHA1 23b1d0c7b884d8dda55c169eccdb4753df87c4b3
- SHA512 639411809b6b2bea82adb25dfec0854a4c0daac321bca45450b4245ea6f2eac0f7aadb0a89ecff915c57e4495949fdee99b0f6c0901866f7acb28e8c52990d7b
- SSDEEP 6144:GzU7blKaP2iCWhWapKRaRXOkN4Swel6f3IsInOCY:oU7M5ijWh0XOW4sEfeO1
- TLSH T1DA94CF263580C436F72907324406FAE40A65AC3E1AD5E54FFB78BE7968311979B3B24F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-10_ab0f57f842ed767a479daae935ecef64_amadey_elex_rhadamanthys_smoke-loader_stop_urelas.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-08-10_ab0f57f842ed767a479daae935ecef64_amadey_elex_rhadamanthys_smoke-loader_stop_urelas
- Size 424KB
- SHA256 2b26a3ca3c4795129a4f3fb5f36bbb47d0fba4a32443213963ce648e9f3c943c
- MD5 ab0f57f842ed767a479daae935ecef64
- SHA1 23b1d0c7b884d8dda55c169eccdb4753df87c4b3
- SHA512 639411809b6b2bea82adb25dfec0854a4c0daac321bca45450b4245ea6f2eac0f7aadb0a89ecff915c57e4495949fdee99b0f6c0901866f7acb28e8c52990d7b
- SSDEEP 6144:GzU7blKaP2iCWhWapKRaRXOkN4Swel6f3IsInOCY:oU7M5ijWh0XOW4sEfeO1
- TLSH T1DA94CF263580C436F72907324406FAE40A65AC3E1AD5E54FFB78BE7968311979B3B24F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE