General
- Target 2026-08-14_d00c3fe2fe6969cb1d16b05e31dadf66_amadey_elex_loda_rhadamanthys_smoke-loader
- Size 2.0MB
- Sample260814-2yaphace33
- SHA256 4c2f55ebd28fc3bdda6f08a12f09a12e4e3f5f262f1c6d56464a21788e069eb1
- MD5 d00c3fe2fe6969cb1d16b05e31dadf66
- SHA1 efcba2a04338ddb92d0a565b0b75af818a5a8083
- SHA512 901c84d0ec6d92c0736f3951746402dddec3cc405fcd4ded7763ad5fb81c3f3b02b4e550ee4fe713be394bc6ce4268270cbb33e992490a9b776b3ae540c970b8
- SSDEEP 24576:EUarPXeDhqWbTJ7DOYd9Q/Jvy3HRrAbfD2JUmN6ac9RoXwuBqsgCVIfYiVLQVqTt:EtrGEQDdEqHibr2mfoAuksgYiVTfgK3
- TLSH T12295D092F245A8F9D80321B59C7DCA2224077E7D4AB9564F35CE762949B338231B7E0F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-14_d00c3fe2fe6969cb1d16b05e31dadf66_amadey_elex_loda_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-14_d00c3fe2fe6969cb1d16b05e31dadf66_amadey_elex_loda_rhadamanthys_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_d00c3fe2fe6969cb1d16b05e31dadf66_amadey_elex_loda_rhadamanthys_smoke-loader
- Size 2.0MB
- SHA256 4c2f55ebd28fc3bdda6f08a12f09a12e4e3f5f262f1c6d56464a21788e069eb1
- MD5 d00c3fe2fe6969cb1d16b05e31dadf66
- SHA1 efcba2a04338ddb92d0a565b0b75af818a5a8083
- SHA512 901c84d0ec6d92c0736f3951746402dddec3cc405fcd4ded7763ad5fb81c3f3b02b4e550ee4fe713be394bc6ce4268270cbb33e992490a9b776b3ae540c970b8
- SSDEEP 24576:EUarPXeDhqWbTJ7DOYd9Q/Jvy3HRrAbfD2JUmN6ac9RoXwuBqsgCVIfYiVLQVqTt:EtrGEQDdEqHibr2mfoAuksgYiVTfgK3
- TLSH T12295D092F245A8F9D80321B59C7DCA2224077E7D4AB9564F35CE762949B338231B7E0F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE