General
- Target 2026-08-12_e474cef4a1b42b74c44de561483b4288_amadey_elex_rhadamanthys_smoke-loader_stop
- Size 502KB
- Sample260812-1nsa5avfmg
- SHA256 8f5e43004e616ba2f36c850b1f3ba2e6e8534d05495f283928c5a89105c6bfad
- MD5 e474cef4a1b42b74c44de561483b4288
- SHA1 683fe8cfe2cd01d96b9d7b97c87b76eb89e08094
- SHA512 1f937d07b2e748f31f72bf44c831fd2f63c27b1c673df52970154d9c50d7c6ac1266e3b6723075ed39bb3cc73832eca91ee18f8ff1678f747fab0bceb880ed16
- SSDEEP 6144:/S4Oq+xNofxkNYFQQG8SdrL9Ti5v4gFcFhN87tW6cvC0WMQbv6FumphcKTtT1ZPK:fwYFQQG8SdrNa4gFK0IqXOFumphcKTpm
- TLSH T156B4C0213690C435E3A613764996E6B419997E345AA0D28FF7B83E799F301C39A3334F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-12_e474cef4a1b42b74c44de561483b4288_amadey_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
1.234.83.146
-
133.242.129.155
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-08-12_e474cef4a1b42b74c44de561483b4288_amadey_elex_rhadamanthys_smoke-loader_stop
- Size 502KB
- SHA256 8f5e43004e616ba2f36c850b1f3ba2e6e8534d05495f283928c5a89105c6bfad
- MD5 e474cef4a1b42b74c44de561483b4288
- SHA1 683fe8cfe2cd01d96b9d7b97c87b76eb89e08094
- SHA512 1f937d07b2e748f31f72bf44c831fd2f63c27b1c673df52970154d9c50d7c6ac1266e3b6723075ed39bb3cc73832eca91ee18f8ff1678f747fab0bceb880ed16
- SSDEEP 6144:/S4Oq+xNofxkNYFQQG8SdrL9Ti5v4gFcFhN87tW6cvC0WMQbv6FumphcKTtT1ZPK:fwYFQQG8SdrNa4gFK0IqXOFumphcKTpm
- TLSH T156B4C0213690C435E3A613764996E6B419997E345AA0D28FF7B83E799F301C39A3334F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE