General
- Target 2026-08-15_37a2c3e6b4ca680b98ec49ec81156f21_amadey_elex_remcos_rhadamanthys_smoke-loader
- Size 808KB
- Sample260816-a232nsxvbt
- SHA256 13448334da2a91b1e182bed2476eb728343afb8422e2413248363ee2a7a7da46
- MD5 37a2c3e6b4ca680b98ec49ec81156f21
- SHA1 0e2365b91ab410a568d8104627e7297d40d5e664
- SHA512 4c424817e34ec67c83e5d2206656c80a9fe8ca5cda785dd1d3b829ea5103a5c2284f351ab5f2e1494c2a2b50b95c819f1a7edb2ad46304ac500728a401165c37
- SSDEEP 24576:cfRxrn39tfNuzXdiTMCuoGqKJ1hTNLZmP:cTr39tfNuzXdQfuFqKhVZmP
- TLSH T1CB05F111B44081B2D1E628324D6987921D763E364BDABDC332D83B597C32DC2E7797AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_37a2c3e6b4ca680b98ec49ec81156f21_amadey_elex_remcos_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_37a2c3e6b4ca680b98ec49ec81156f21_amadey_elex_remcos_rhadamanthys_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_37a2c3e6b4ca680b98ec49ec81156f21_amadey_elex_remcos_rhadamanthys_smoke-loader
- Size 808KB
- SHA256 13448334da2a91b1e182bed2476eb728343afb8422e2413248363ee2a7a7da46
- MD5 37a2c3e6b4ca680b98ec49ec81156f21
- SHA1 0e2365b91ab410a568d8104627e7297d40d5e664
- SHA512 4c424817e34ec67c83e5d2206656c80a9fe8ca5cda785dd1d3b829ea5103a5c2284f351ab5f2e1494c2a2b50b95c819f1a7edb2ad46304ac500728a401165c37
- SSDEEP 24576:cfRxrn39tfNuzXdiTMCuoGqKJ1hTNLZmP:cTr39tfNuzXdQfuFqKhVZmP
- TLSH T1CB05F111B44081B2D1E628324D6987921D763E364BDABDC332D83B597C32DC2E7797AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE