General
- Target 2026-08-18_cdac129510d28251be058fb35bd51e36_amadey_elex_remcos_rhadamanthys_smoke-loader
- Size 808KB
- Sample260818-2x4k7abh33
- SHA256 87f7a9fd30a1f6aa7657fa67497fa359da23719dadb8a023f40347d91f1f9b93
- MD5 cdac129510d28251be058fb35bd51e36
- SHA1 5bde1b720fc0815adfc6b6024cd0399744bc51b2
- SHA512 2a803ddfa8954f4279d7db974298538cf2aa2d9e9512e13591171c110b09dbdeb252740d4b905c849a27b22fe1a120f4e9ea93d6648ed3c8954de13410c79aff
- SSDEEP 24576:cfRxrn39tfNuzXkFcWy7Oj9c7g/7Dswo1mGLZmP:cTr39tfNuzX6yY9c7Q7DZEZmP
- TLSH T1AC05F111A94081B2D1D525724D7E87A11DBA3E364BEA7DC332D83B193C32DC1A7397AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-18_cdac129510d28251be058fb35bd51e36_amadey_elex_remcos_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-18_cdac129510d28251be058fb35bd51e36_amadey_elex_remcos_rhadamanthys_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_cdac129510d28251be058fb35bd51e36_amadey_elex_remcos_rhadamanthys_smoke-loader
- Size 808KB
- SHA256 87f7a9fd30a1f6aa7657fa67497fa359da23719dadb8a023f40347d91f1f9b93
- MD5 cdac129510d28251be058fb35bd51e36
- SHA1 5bde1b720fc0815adfc6b6024cd0399744bc51b2
- SHA512 2a803ddfa8954f4279d7db974298538cf2aa2d9e9512e13591171c110b09dbdeb252740d4b905c849a27b22fe1a120f4e9ea93d6648ed3c8954de13410c79aff
- SSDEEP 24576:cfRxrn39tfNuzXkFcWy7Oj9c7g/7Dswo1mGLZmP:cTr39tfNuzX6yY9c7Q7DZEZmP
- TLSH T1AC05F111A94081B2D1D525724D7E87A11DBA3E364BEA7DC332D83B193C32DC1A7397AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE