General
- Target 2026-08-15_56530c71dd0da913877a68aa24d0c99a_amadey_elex_rhadamanthys_smoke-loader_stop_urelas
- Size 424KB
- Sample260815-gnvayazflc
- SHA256 4dfadcb9043edab278ee7fdcb9d153e03d108669a2aff0babd63f310e982d080
- MD5 56530c71dd0da913877a68aa24d0c99a
- SHA1 cb3332c10a90d1de5fe1c31504dd0bce157be1cd
- SHA512 05866579317fb91d9bfcf35f161d3cee5c7e737e8658b7df17e0745b8c6ef2ac83cba90644428ad841c266d53059b1e0df484f00285777473c563c1d835d4b94
- SSDEEP 6144:GzU7blKaP2iCWhWapKRaRXOkN4Swel6f3IsInOCQ:oU7M5ijWh0XOW4sEfeOZ
- TLSH T13B94CF263580C436F72907324406FAE40A65AC3E1AD5E54FFB78BE7968311979B3B24F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-15_56530c71dd0da913877a68aa24d0c99a_amadey_elex_rhadamanthys_smoke-loader_stop_urelas.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-08-15_56530c71dd0da913877a68aa24d0c99a_amadey_elex_rhadamanthys_smoke-loader_stop_urelas
- Size 424KB
- SHA256 4dfadcb9043edab278ee7fdcb9d153e03d108669a2aff0babd63f310e982d080
- MD5 56530c71dd0da913877a68aa24d0c99a
- SHA1 cb3332c10a90d1de5fe1c31504dd0bce157be1cd
- SHA512 05866579317fb91d9bfcf35f161d3cee5c7e737e8658b7df17e0745b8c6ef2ac83cba90644428ad841c266d53059b1e0df484f00285777473c563c1d835d4b94
- SSDEEP 6144:GzU7blKaP2iCWhWapKRaRXOkN4Swel6f3IsInOCQ:oU7M5ijWh0XOW4sEfeOZ
- TLSH T13B94CF263580C436F72907324406FAE40A65AC3E1AD5E54FFB78BE7968311979B3B24F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE