General
- Target 2026-08-20_e4774fdef6247e0cd7259cb0e88da8c8_amadey_elex_rhadamanthys_smoke-loader_stop
- Size 503KB
- Sample260820-zztsnaap5v
- SHA256 d93b921c297c79419cb4ec2ff27c6c17520903e6d9ae43e032b6b8af5112942c
- MD5 e4774fdef6247e0cd7259cb0e88da8c8
- SHA1 1aa4832b241d3da7984d18ace10e77d375eb38d9
- SHA512 7ab7d25070488bc5a122e96e9a823303aa5fea3a0b17f31c83631435ce78d657b16a6b0a3f2ae4d41efa013ebd9fbb02089deeb4f6150a4f980894e88f012322
- SSDEEP 6144:/S4Oq+xNofxkNYFQQG8SdrL9Ti5v4gFcFhN87tW6cvC0WMQbv6FumphcKTtT1ZPm:fwYFQQG8SdrNa4gFK0IqXOFumphcKTpi
- TLSH T185B4C0213690C435E3A613764996E6B419997E344AA4D28FF7B83E799F301C39A3334F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-20_e4774fdef6247e0cd7259cb0e88da8c8_amadey_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
1.234.83.146
-
133.242.129.155
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-08-20_e4774fdef6247e0cd7259cb0e88da8c8_amadey_elex_rhadamanthys_smoke-loader_stop
- Size 503KB
- SHA256 d93b921c297c79419cb4ec2ff27c6c17520903e6d9ae43e032b6b8af5112942c
- MD5 e4774fdef6247e0cd7259cb0e88da8c8
- SHA1 1aa4832b241d3da7984d18ace10e77d375eb38d9
- SHA512 7ab7d25070488bc5a122e96e9a823303aa5fea3a0b17f31c83631435ce78d657b16a6b0a3f2ae4d41efa013ebd9fbb02089deeb4f6150a4f980894e88f012322
- SSDEEP 6144:/S4Oq+xNofxkNYFQQG8SdrL9Ti5v4gFcFhN87tW6cvC0WMQbv6FumphcKTtT1ZPm:fwYFQQG8SdrNa4gFK0IqXOFumphcKTpi
- TLSH T185B4C0213690C435E3A613764996E6B419997E344AA4D28FF7B83E799F301C39A3334F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE