General
- Target 2026-08-19_51fcee6686db0c87cf6b1a73e2bb6e21_amadey_elex_rhadamanthys_smoke-loader_stop_urelas
- Size 647KB
- Sample260819-yf2tgssapd
- SHA256 479ef2619e2cff4ca57a5e38fd52135a5923f203698b4169ac400443af51801e
- MD5 51fcee6686db0c87cf6b1a73e2bb6e21
- SHA1 a8cfe043dca0802590513b36183b7f058905396e
- SHA512 c47164021532a543b02852c095dbbe3e194b38c6cd8d42916c1cb498f79d6054154c38e5887acdcd53fa08c169752c3792d59c83ced57ff03639a1ce5abe71fd
- SSDEEP 12288:VU7M5ijWh0XOW4sEf9OTijWh0XOW4sEfwA:VUowYcOW4a2YcOW4T
- TLSH T106E4E01675408475F7290B320806FAE40AA9AD3E1AD4F54FF67CBE7968320979B3724F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-19_51fcee6686db0c87cf6b1a73e2bb6e21_amadey_elex_rhadamanthys_smoke-loader_stop_urelas.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-08-19_51fcee6686db0c87cf6b1a73e2bb6e21_amadey_elex_rhadamanthys_smoke-loader_stop_urelas
- Size 647KB
- SHA256 479ef2619e2cff4ca57a5e38fd52135a5923f203698b4169ac400443af51801e
- MD5 51fcee6686db0c87cf6b1a73e2bb6e21
- SHA1 a8cfe043dca0802590513b36183b7f058905396e
- SHA512 c47164021532a543b02852c095dbbe3e194b38c6cd8d42916c1cb498f79d6054154c38e5887acdcd53fa08c169752c3792d59c83ced57ff03639a1ce5abe71fd
- SSDEEP 12288:VU7M5ijWh0XOW4sEf9OTijWh0XOW4sEfwA:VUowYcOW4a2YcOW4T
- TLSH T106E4E01675408475F7290B320806FAE40AA9AD3E1AD4F54FF67CBE7968320979B3724F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE