General
- Target 2026-08-12_352e82b0063fe293ea46ddd0c88971a8_amadey_elex_rhadamanthys_smoke-loader_stop
- Size 503KB
- Sample260812-fa7tfayfpd
- SHA256 b87f9bc75d503f0ebd8a330476262b5ed30f0d408924454a66fd263e015c65ff
- MD5 352e82b0063fe293ea46ddd0c88971a8
- SHA1 bff3ed94670fdc1c83cabb15f225031300848c01
- SHA512 a2e6d26d4ee6ffc76cf56536076f858a68bee6f4faf40ec84b76ebf87d0cf886b09f32c13f4a71c163e89902a7ad0ae1b8369942888ac937dc184d73ea881e43
- SSDEEP 6144:/S4Oq+xNofxkNYFQQG8SdrL9Ti5v4gFcFhN87tW6cvC0WMQbv6FumphcKTtT1ZPc:fwYFQQG8SdrNa4gFK0IqXOFumphcKTpY
- TLSH T130B4C0213690C435E3A613764996E6B419997E344AA4D28FF7B83E799F301C39A3334F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-12_352e82b0063fe293ea46ddd0c88971a8_amadey_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
1.234.83.146
-
133.242.129.155
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-08-12_352e82b0063fe293ea46ddd0c88971a8_amadey_elex_rhadamanthys_smoke-loader_stop
- Size 503KB
- SHA256 b87f9bc75d503f0ebd8a330476262b5ed30f0d408924454a66fd263e015c65ff
- MD5 352e82b0063fe293ea46ddd0c88971a8
- SHA1 bff3ed94670fdc1c83cabb15f225031300848c01
- SHA512 a2e6d26d4ee6ffc76cf56536076f858a68bee6f4faf40ec84b76ebf87d0cf886b09f32c13f4a71c163e89902a7ad0ae1b8369942888ac937dc184d73ea881e43
- SSDEEP 6144:/S4Oq+xNofxkNYFQQG8SdrL9Ti5v4gFcFhN87tW6cvC0WMQbv6FumphcKTtT1ZPc:fwYFQQG8SdrNa4gFK0IqXOFumphcKTpY
- TLSH T130B4C0213690C435E3A613764996E6B419997E344AA4D28FF7B83E799F301C39A3334F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE