General
- Target 2026-08-19_77a1f0874593be3b1fbd9802ba5eff21_amadey_elex_remcos_rhadamanthys_smoke-loader
- Size 808KB
- Sample260819-2kh4qaaa44
- SHA256 a7f58d7c48d9d0945cd33a41983e8181b7f6a69ffa4fd2aa3a5e427115f66220
- MD5 77a1f0874593be3b1fbd9802ba5eff21
- SHA1 d5521cd98558f60ddfdca5ecdfafd3d8f2c498dc
- SHA512 9936a5ed7716e23dfa473ef49827e99af7b6d32c282cea7be54eec5f70b62c549c54dd29e8493d840b45cbf6fbc595c3f09b2ac43faa1eeab7426a4c142a05e8
- SSDEEP 24576:cfRxrn39tfNuzX36OsnWjc89yFaY/KnLZmP:cTr39tfNuzXKOsWjcxaAKLZmP
- TLSH T1BB05F141E88081B2D0D529324D7997511E763E765BDABEC331C83B297C32DC2A7397AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_77a1f0874593be3b1fbd9802ba5eff21_amadey_elex_remcos_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_77a1f0874593be3b1fbd9802ba5eff21_amadey_elex_remcos_rhadamanthys_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_77a1f0874593be3b1fbd9802ba5eff21_amadey_elex_remcos_rhadamanthys_smoke-loader
- Size 808KB
- SHA256 a7f58d7c48d9d0945cd33a41983e8181b7f6a69ffa4fd2aa3a5e427115f66220
- MD5 77a1f0874593be3b1fbd9802ba5eff21
- SHA1 d5521cd98558f60ddfdca5ecdfafd3d8f2c498dc
- SHA512 9936a5ed7716e23dfa473ef49827e99af7b6d32c282cea7be54eec5f70b62c549c54dd29e8493d840b45cbf6fbc595c3f09b2ac43faa1eeab7426a4c142a05e8
- SSDEEP 24576:cfRxrn39tfNuzX36OsnWjc89yFaY/KnLZmP:cTr39tfNuzXKOsWjcxaAKLZmP
- TLSH T1BB05F141E88081B2D0D529324D7997511E763E765BDABEC331C83B297C32DC2A7397AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE