General
- Target 2026-08-14_5b3ea08c87e72948f16350dbd605ac62_amadey_elex_remcos_rhadamanthys_smoke-loader
- Size 808KB
- Sample260814-mdltpshb25
- SHA256 7a8f41ae390ffbc96e2801fd25b0b8d18afcbe3af816de8f3ba71f892919d7be
- MD5 5b3ea08c87e72948f16350dbd605ac62
- SHA1 2a3d17ed93d54fc4d6dc05e402d74b3b35c5c4da
- SHA512 dab80bd98c12365412092f0a774bb42ee13e86bbb4b513734d0096fe42f4daf89c0d360bbe1cf5f0e3564291dbbf587e17d6db23ed430faf2fdbe61c84b9a5c7
- SSDEEP 24576:cfRxrn39tfNuzXtccJcdxxzVfr4zKNLZmP:cTr39tfNuzXt7MxRn5ZmP
- TLSH T17505F101B58081B1D0D528324DBA87621E763E364AD67EC372D87B697C33DC1A7793AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-14_5b3ea08c87e72948f16350dbd605ac62_amadey_elex_remcos_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-14_5b3ea08c87e72948f16350dbd605ac62_amadey_elex_remcos_rhadamanthys_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_5b3ea08c87e72948f16350dbd605ac62_amadey_elex_remcos_rhadamanthys_smoke-loader
- Size 808KB
- SHA256 7a8f41ae390ffbc96e2801fd25b0b8d18afcbe3af816de8f3ba71f892919d7be
- MD5 5b3ea08c87e72948f16350dbd605ac62
- SHA1 2a3d17ed93d54fc4d6dc05e402d74b3b35c5c4da
- SHA512 dab80bd98c12365412092f0a774bb42ee13e86bbb4b513734d0096fe42f4daf89c0d360bbe1cf5f0e3564291dbbf587e17d6db23ed430faf2fdbe61c84b9a5c7
- SSDEEP 24576:cfRxrn39tfNuzXtccJcdxxzVfr4zKNLZmP:cTr39tfNuzXt7MxRn5ZmP
- TLSH T17505F101B58081B1D0D528324DBA87621E763E364AD67EC372D87B697C33DC1A7793AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE